# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1866

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1867

---

## [How to store software version numbers?](https://discuss.elastic.co/t/how-to-store-software-version-numbers/201537)

<div class="topic-metadata">

**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 9:30pm UTC](https://discuss.elastic.co/t/how-to-store-software-version-numbers/201537 "2019-09-30T21:30:54Z")

</div>

Hi, What is the best practice for storing software version numbers like 6.3.1 or 4.10.2? None of the field datatypes seem to fit the bill, so my current thinking is to store the major, minor, and patch versions as sepa…

---

## [Kibana is always migrating from .kibana to .kibana\_1 on fresh startup](https://discuss.elastic.co/t/kibana-is-always-migrating-from-kibana-to-kibana-1-on-fresh-startup/201569)

<div class="topic-metadata">

**Author:** [@lmqnam](https://discuss.elastic.co/u/lmqnam)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 9:24pm UTC](https://discuss.elastic.co/t/kibana-is-always-migrating-from-kibana-to-kibana-1-on-fresh-startup/201569 "2019-09-30T21:24:46Z")

</div>

I'm using Kibana 6.5.4 When staring fresh Kinaba, it always migrates index. Why does Kibana always migrate index on fresh startup? Please help to explain. Thanks in advance! I referred similar case https://www.elastic…

---

## [Error while creating index template in elastisearch](https://discuss.elastic.co/t/error-while-creating-index-template-in-elastisearch/201698)

<div class="topic-metadata">

**Author:** [@dje](https://discuss.elastic.co/u/dje)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 8:35pm UTC](https://discuss.elastic.co/t/error-while-creating-index-template-in-elastisearch/201698 "2019-09-30T20:35:35Z")

</div>

Hi everyone, This is my setup : Elasticsearch 7.3.2 + Kibana 7.3.2 on Ubuntu (x-pack/ssl on both) logstash 7.3.2 on Ubuntu I get the following error while trying to run logstash against ES : $ sudo /usr/share/logs…

---

## [Normalize a script\_score based on returned doc fields](https://discuss.elastic.co/t/normalize-a-script-score-based-on-returned-doc-fields/201693)

<div class="topic-metadata">

**Author:** [@rpanczer](https://discuss.elastic.co/u/rpanczer)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 7:29pm UTC](https://discuss.elastic.co/t/normalize-a-script-score-based-on-returned-doc-fields/201693 "2019-09-30T19:29:00Z")

</div>

I am trying to change the \_score of documents by normalizing all returned doc\['relevancy'\].value fields by the max doc\['relevancy'\].value of the result set. I also would like to multiple this result by the Max Elastic Se…

---

## [Timestamp Range Not Working vs. Date Format Range Working](https://discuss.elastic.co/t/timestamp-range-not-working-vs-date-format-range-working/200909)

<div class="topic-metadata">

**Author:** [@RAMichel](https://discuss.elastic.co/u/RAMichel)\
**Replies:** 1\
**Last updated:** [September 25, 2019, 12:27pm UTC](https://discuss.elastic.co/t/timestamp-range-not-working-vs-date-format-range-working/200909 "2019-09-25T12:27:07Z")

</div>

Hopefully this makes sense. I have a document with two fields storing the same data, but one is in an epoch\_millis timestamp format, and the other is in a readable format. The mapping for these two fields is: "latest\_da…

---

## [How to Grok a pattern into multiple field names](https://discuss.elastic.co/t/how-to-grok-a-pattern-into-multiple-field-names/201300)

<div class="topic-metadata">

**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 5:44pm UTC](https://discuss.elastic.co/t/how-to-grok-a-pattern-into-multiple-field-names/201300 "2019-09-30T17:44:38Z")

</div>

How can I grok a matched pattern into multiple field names? Is it possible to parse and assign a matched pattern twice with Grok? Minimal, Complete, Verifiable Example Take this log line: 09/26/2019 Keith Miklas A…

---

## [Index.merge.policy.reclaim\_deletes\_weight can we set this parameter at cluster level or index level](https://discuss.elastic.co/t/index-merge-policy-reclaim-deletes-weight-can-we-set-this-parameter-at-cluster-level-or-index-level/201687)

<div class="topic-metadata">

**Author:** [@Sagar\_Cs](https://discuss.elastic.co/u/Sagar_Cs)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 5:31pm UTC](https://discuss.elastic.co/t/index-merge-policy-reclaim-deletes-weight-can-we-set-this-parameter-at-cluster-level-or-index-level/201687 "2019-09-30T17:31:59Z")

</div>

Hii Can some one tell me if we can set above param at cluster level or index level

---

## [Elasticsearch Percolate Query Search Score](https://discuss.elastic.co/t/elasticsearch-percolate-query-search-score/200310)

<div class="topic-metadata">

**Author:** [@niketpatel2525](https://discuss.elastic.co/u/niketpatel2525)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 5:29pm UTC](https://discuss.elastic.co/t/elasticsearch-percolate-query-search-score/200310 "2019-09-30T17:29:35Z")

</div>

How to interpret score value return from the percolate query search? What is the difference between score received on single document search vs multiple document search on percolate index?

---

## [Difference between Basic License and Elastic license](https://discuss.elastic.co/t/difference-between-basic-license-and-elastic-license/201618)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 5:06pm UTC](https://discuss.elastic.co/t/difference-between-basic-license-and-elastic-license/201618 "2019-09-30T17:06:57Z")

</div>

Hi all, I am clear about Apache 2.0 and Elastic license but I would like to know the difference between these two license . Thanks

---

## [Can we use the free ElasticSearch encryption for production environments?](https://discuss.elastic.co/t/can-we-use-the-free-elasticsearch-encryption-for-production-environments/201678)

<div class="topic-metadata">

**Author:** [@strouja](https://discuss.elastic.co/u/strouja)\
**Replies:** 3\
**Last updated:** [September 30, 2019, 4:58pm UTC](https://discuss.elastic.co/t/can-we-use-the-free-elasticsearch-encryption-for-production-environments/201678 "2019-09-30T16:58:06Z")

</div>

Hi I read this "Elasticsearch now includes free security features by default, which will help ensure you don’t need to run an unprotected cluster." Which is in in https://www.elastic.co/blog/dear-search-guard-users We…

---

## [Conditional Index Value in output](https://discuss.elastic.co/t/conditional-index-value-in-output/201448)

<div class="topic-metadata">

**Author:** [@ccaviris89](https://discuss.elastic.co/u/ccaviris89)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 4:08pm UTC](https://discuss.elastic.co/t/conditional-index-value-in-output/201448 "2019-09-30T16:08:28Z")

</div>

I was looking at this and trying to work in conditional logic on my pipeline.conf output so that if a given field exists, the index with have one values, and otherwise it will default to another value. I currently have …

---

## [Logstash dynamic fields](https://discuss.elastic.co/t/logstash-dynamic-fields/201487)

<div class="topic-metadata">

**Author:** [@Ankit\_Sawant](https://discuss.elastic.co/u/Ankit_Sawant)\
**Replies:** 3\
**Last updated:** [September 30, 2019, 3:53pm UTC](https://discuss.elastic.co/t/logstash-dynamic-fields/201487 "2019-09-30T15:53:53Z")

</div>

I have a field "msg\_string" in my logs which has multiple fields saparated by tilda "~" e.g. msg\_string =firstname~lasname~city~hobby~marks ... position of fields firstname,lastname are at index 0 and 1 the position o…

---

## [ILM not working after licence expires](https://discuss.elastic.co/t/ilm-not-working-after-licence-expires/199646)

<div class="topic-metadata">

**Author:** [@Mesmer](https://discuss.elastic.co/u/Mesmer)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 3:53pm UTC](https://discuss.elastic.co/t/ilm-not-working-after-licence-expires/199646 "2019-09-30T15:53:44Z")

</div>

After trying out Machine Learning trial licence i notice that Index Lifecycle Management is no longer working. The error i get is 403: Forbidden. You cannot use Index Management because your trial license has expired. …

---

## [How to use search\_after in Elastic High Level Rest Client for pagination](https://discuss.elastic.co/t/how-to-use-search-after-in-elastic-high-level-rest-client-for-pagination/201656)

<div class="topic-metadata">

**Author:** [@apachunuri](https://discuss.elastic.co/u/apachunuri)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 3:45pm UTC](https://discuss.elastic.co/t/how-to-use-search-after-in-elastic-high-level-rest-client-for-pagination/201656 "2019-09-30T15:45:41Z")

</div>

Hi, I am using elastic high level rest client 6.4.3 and i cant find a way to use the search\_after functionality using this library. For more details, i have asked my question here https://stackoverflow.com/questions/58…

---

## [Any way to get ingest node stats/metrics/visibility?](https://discuss.elastic.co/t/any-way-to-get-ingest-node-stats-metrics-visibility/201548)

<div class="topic-metadata">

**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 3:45pm UTC](https://discuss.elastic.co/t/any-way-to-get-ingest-node-stats-metrics-visibility/201548 "2019-09-30T15:45:17Z")

</div>

Hey there, I was just wondering if there is any way to get throughput/failure metrics to ingest pipelines. I don't know of any way to query this currently. Stuff like: How many documents has this pipeline ingested How…

---

## [Cannot install Salesforce input plugin](https://discuss.elastic.co/t/cannot-install-salesforce-input-plugin/201666)

<div class="topic-metadata">

**Author:** [@MARCO\_RAMBALDI](https://discuss.elastic.co/u/MARCO_RAMBALDI)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 3:13pm UTC](https://discuss.elastic.co/t/cannot-install-salesforce-input-plugin/201666 "2019-09-30T15:13:01Z")

</div>

Hi, I tried to install the Salesforce input plugin with the following command: sudo bin/logstash-plugin install logstash-input-salesforce The following error appears: ERROR: Installation Aborted, message: Bundler cou…

---

## [Read files and once daily read all the files again](https://discuss.elastic.co/t/read-files-and-once-daily-read-all-the-files-again/201620)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 2:54pm UTC](https://discuss.elastic.co/t/read-files-and-once-daily-read-all-the-files-again/201620 "2019-09-30T14:54:37Z")

</div>

Hi, I have situation where our database team export around 100 csv files during a day which I need to import to Elasticsearch. It is being done by NFS, and I have logstash constantly running so when new file is created h…

---

## [Disable Elastic Security Plugin in ECE](https://discuss.elastic.co/t/disable-elastic-security-plugin-in-ece/201650)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 2:46pm UTC](https://discuss.elastic.co/t/disable-elastic-security-plugin-in-ece/201650 "2019-09-30T14:46:53Z")

</div>

Hi, I am trialing out ECE and we have a our own custom plugin that implements the rest filter class. This is incompatible with elastic security plugin since it seems that only one plugin can implement the rest filter cl…

---

## [Kibana does not refresh list of fields when clicking on the refresh button](https://discuss.elastic.co/t/kibana-does-not-refresh-list-of-fields-when-clicking-on-the-refresh-button/200570)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 2:18pm UTC](https://discuss.elastic.co/t/kibana-does-not-refresh-list-of-fields-when-clicking-on-the-refresh-button/200570 "2019-09-30T14:18:13Z")

</div>

Hello, I am running an elk stack 7.3.0 with kibana 7.3.0. I have recently enabled lots of incoming data into the APM but in order to have hte new fields searchable I have to refresh the index pattern in order to rescan …

---

## [Filter KV](https://discuss.elastic.co/t/filter-kv/201623)

<div class="topic-metadata">

**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 2:16pm UTC](https://discuss.elastic.co/t/filter-kv/201623 "2019-09-30T14:16:46Z")

</div>

I'm using KV to filter the data from the raw data from a firewall. I have a field that sometimes has two values, and I'd like to keep only the first one. How could I do to filter only the first one. I attach my filter.…

---

## [Error while installing X-pack on windows](https://discuss.elastic.co/t/error-while-installing-x-pack-on-windows/201310)

<div class="topic-metadata">

**Author:** [@humza-cyber](https://discuss.elastic.co/u/humza-cyber)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 2:14pm UTC](https://discuss.elastic.co/t/error-while-installing-x-pack-on-windows/201310 "2019-09-30T14:14:13Z")

</div>

I have elastic 5.5.0, downloaded in zip format, on Windows. I'm trying to install X-pack 5.5.3. As per Elastic support matrix it is compatible but getting an error will installing it. Here is the error log C:\\elasticse…

---

## [Logstash Remove Nested Dynamic-named fields](https://discuss.elastic.co/t/logstash-remove-nested-dynamic-named-fields/201619)

<div class="topic-metadata">

**Author:** [@Jsoini](https://discuss.elastic.co/u/Jsoini)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 2:07pm UTC](https://discuss.elastic.co/t/logstash-remove-nested-dynamic-named-fields/201619 "2019-09-30T14:07:41Z")

</div>

Hello. I have a problem with a Logstash pipeline, which is getting events from Filebeat containers running on Kubernetes. The problem is, that some of the events will have fields that have dynamically generated names o…

---

## [Defenxor DSIEM for Event Correlation with Logstash](https://discuss.elastic.co/t/defenxor-dsiem-for-event-correlation-with-logstash/201649)

<div class="topic-metadata">

**Author:** [@gargantua](https://discuss.elastic.co/u/gargantua)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 1:47pm UTC](https://discuss.elastic.co/t/defenxor-dsiem-for-event-correlation-with-logstash/201649 "2019-09-30T13:47:04Z")

</div>

Hello, I want to correlate my events with defenxor/dsiem. Is there anyone who uses dsiem for event correlation? Is it enough for correlation? What are advantages and disadvantages of dsiem?

---

## [Kibana API for automatic Export all](https://discuss.elastic.co/t/kibana-api-for-automatic-export-all/201243)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 6\
**Last updated:** [September 30, 2019, 1:46pm UTC](https://discuss.elastic.co/t/kibana-api-for-automatic-export-all/201243 "2019-09-30T13:46:36Z")

</div>

Hi all, Thanks in advance for your time, I'm trying to develop a shell script to automatize backups of my Kibana saved objects (dashboards+all related objects) Running : curl -k -XGET 'https://xx.xx.xx.x:5601/api/kib…

---

## [Aggregating and searching data from only the latest records of an identifier](https://discuss.elastic.co/t/aggregating-and-searching-data-from-only-the-latest-records-of-an-identifier/199703)

<div class="topic-metadata">

**Author:** [@yc2019](https://discuss.elastic.co/u/yc2019)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 1:38pm UTC](https://discuss.elastic.co/t/aggregating-and-searching-data-from-only-the-latest-records-of-an-identifier/199703 "2019-09-30T13:38:29Z")

</div>

{'name': 'student1', 'date': '2019-03-12', 'grade': 3} {'name': 'student2', 'date': '2019-03-12', 'grade': 4} {'name': 'student3', 'date': '2019-03-12', 'grade': 5} {'name': 'student4', 'date': '2019-03-12', 'grade': 4} …

---

## [Understanding watermarks](https://discuss.elastic.co/t/understanding-watermarks/201624)

<div class="topic-metadata">

**Author:** [@AvivCohn](https://discuss.elastic.co/u/AvivCohn)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 1:23pm UTC](https://discuss.elastic.co/t/understanding-watermarks/201624 "2019-09-30T13:23:15Z")

</div>

Hi, I understand (and please correct me if I'm wrong ), that: When a node reaches low disk watermark, shards will no longer be allocated on it. And when a node reaches high disk watermark, shards will be attempted to …

---

## [How to remove multiple lines and how to pick specifics information from log files](https://discuss.elastic.co/t/how-to-remove-multiple-lines-and-how-to-pick-specifics-information-from-log-files/201645)

<div class="topic-metadata">

**Author:** [@rkcharlie](https://discuss.elastic.co/u/rkcharlie)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 1:11pm UTC](https://discuss.elastic.co/t/how-to-remove-multiple-lines-and-how-to-pick-specifics-information-from-log-files/201645 "2019-09-30T13:11:46Z")

</div>

Oracle xxx Capture for xxx Version 12.2.0.1.160823 OGGCORE\_12.2.0.1.0OGGBP\_PLATFORMS\_160805.1058\_FBO Linux, x64, 64bit (optimized), xxx 12c on Aug 5 2016 23:48:26 Copyright (C) 1995, 2016, Oracle and/or…

---

## [Elastic search Group by count for particular field](https://discuss.elastic.co/t/elastic-search-group-by-count-for-particular-field/201644)

<div class="topic-metadata">

**Author:** [@tripti\_tiwari](https://discuss.elastic.co/u/tripti_tiwari)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 1:10pm UTC](https://discuss.elastic.co/t/elastic-search-group-by-count-for-particular-field/201644 "2019-09-30T13:10:17Z")

</div>

I have a elastic search index with following documents { "id":1 "mainid ": "497940311988134801282012-04-10 ", } { "id":2 "mainid ": "4979…

---

## [Configuring output to remote machine](https://discuss.elastic.co/t/configuring-output-to-remote-machine/201637)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 3\
**Last updated:** [September 30, 2019, 12:55pm UTC](https://discuss.elastic.co/t/configuring-output-to-remote-machine/201637 "2019-09-30T12:55:10Z")

</div>

Hi Is it possible to configure the logstash output to a elasticsearch installed on remote ip???

---

## [SearchAPIにおけるレスポンスデータの操作について](https://discuss.elastic.co/t/searchapi/200363)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 3\
**Last updated:** [September 30, 2019, 12:42pm UTC](https://discuss.elastic.co/t/searchapi/200363 "2019-09-30T12:42:00Z")

</div>

お世話になります。 SearchAPIを使用して、Elasticsearchに貯めたデータを別システムへ連携しようとしています。 SearchAPIへのリクエストをプログラム化して、自動化するところまではできたのですが、 レスポンスのデータを操作するところでつまずいています。 \_idを指定してリクエストしたところ、下記のレスポンスを取得できました。 { "took": 407, "timed\_out": false, …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1865)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1867)
