# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1872 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1873 --- ## [If statment not working event.dataset](https://discuss.elastic.co/t/if-statment-not-working-event-dataset/201261)
**Author:** [@forestnd](https://discuss.elastic.co/u/forestnd)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 3:02pm UTC](https://discuss.elastic.co/t/if-statment-not-working-event-dataset/201261 "2019-09-26T15:02:02Z")
Hay all I am treying with logstash to add an tag where ever filebeats pass an nignx.access if \[event.dataset\] == "nginx.access" { mutate { add\_tag =\> \[ "nginx" \] } } But for some reason they are not … --- ## [How does PercolatorQuery work when query extraction failed](https://discuss.elastic.co/t/how-does-percolatorquery-work-when-query-extraction-failed/200884)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 8\ **Last updated:** [September 26, 2019, 2:49pm UTC](https://discuss.elastic.co/t/how-does-percolatorquery-work-when-query-extraction-failed/200884 "2019-09-26T14:49:57Z")
Let me explain you our percolator architecture Our percolator docs look like this { "domain": \<\>, "query": { .. } } We have around 100K percolators registered. The number of percolators between domains can vary… --- ## [Not able to Combine Interval Queries with Other Bool Filter](https://discuss.elastic.co/t/not-able-to-combine-interval-queries-with-other-bool-filter/201195)
**Author:** [@harisc4u](https://discuss.elastic.co/u/harisc4u)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 2:42pm UTC](https://discuss.elastic.co/t/not-able-to-combine-interval-queries-with-other-bool-filter/201195 "2019-09-26T14:42:17Z")
I am using Elastic intervals Queries https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-intervals-query.html#query-dsl-intervals-query I want to combine interval queries with another range filter … --- ## [Network.host issue: elasticsearch.service: Main process exited, code=exited, status=78](https://discuss.elastic.co/t/network-host-issue-elasticsearch-service-main-process-exited-code-exited-status-78/200193)
**Author:** [@the1bit](https://discuss.elastic.co/u/the1bit)\ **Replies:** 23\ **Last updated:** [September 26, 2019, 2:31pm UTC](https://discuss.elastic.co/t/network-host-issue-elasticsearch-service-main-process-exited-code-exited-status-78/200193 "2019-09-26T14:31:34Z")
Hi, I try to configure an Elasticsearch cluster on Ubuntu 18.04 (on Azure). The basic installation is fine. Nevertheless when I try to configure the "network.host" value in the configuration file the Elasticsearch servi… --- ## [Failed to execute action : Logstash : Pipeline action create error](https://discuss.elastic.co/t/failed-to-execute-action-logstash-pipeline-action-create-error/201182)
**Author:** [@Sushma07](https://discuss.elastic.co/u/Sushma07)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:25pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash-pipeline-action-create-error/201182 "2019-09-26T14:25:55Z")
hi, have following setup for Logstash-to-Logstash Communication between 2 servers : Amazon Linux machine Logstash version : 7.x And this is my logstash.conf file: input { stdin { } } output { lumberjack { codec… --- ## [Logstash multiple output parallel](https://discuss.elastic.co/t/logstash-multiple-output-parallel/201151)
**Author:** [@ansarpalakottal](https://discuss.elastic.co/u/ansarpalakottal)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:23pm UTC](https://discuss.elastic.co/t/logstash-multiple-output-parallel/201151 "2019-09-26T14:23:35Z")
How can I write parallel output to multiple elasticsearch ? I don't want standard load balancing. --- ## [How to display data directly in Kibana Visualize?](https://discuss.elastic.co/t/how-to-display-data-directly-in-kibana-visualize/201146)
**Author:** [@Harry23](https://discuss.elastic.co/u/Harry23)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:13pm UTC](https://discuss.elastic.co/t/how-to-display-data-directly-in-kibana-visualize/201146 "2019-09-26T14:13:10Z")
Apologize for my beginner question. Kibana Visualize is based on aggregations, however I want to display directly my data, not their average/sum/max/min etc, how can i do this? Thanks! --- ## [Running beats on Kubernetes](https://discuss.elastic.co/t/running-beats-on-kubernetes/201251)
**Author:** [@earl\_potter](https://discuss.elastic.co/u/earl_potter)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 2:11pm UTC](https://discuss.elastic.co/t/running-beats-on-kubernetes/201251 "2019-09-26T14:11:49Z")
I was running Minikube 1.4 on my Mac w/ Kubectl 1.16 and couldn't get the default manifest to run from https://raw.githubusercontent.com/elastic/beats/7.3/deploy/kubernetes/filebeat-kubernetes.yaml using these docs. htt… --- ## [Visualization of Max value for Metric is incorrect](https://discuss.elastic.co/t/visualization-of-max-value-for-metric-is-incorrect/201237)
**Author:** [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:07pm UTC](https://discuss.elastic.co/t/visualization-of-max-value-for-metric-is-incorrect/201237 "2019-09-26T14:07:27Z")
Hello, I have a field "Active user" which is a number. Time Series shows correctly (Max 7) Whereas metric shows as 4 (Even though for 24 hours, maximum value is 7) --- ## [Best english stemmer in elasticsearch](https://discuss.elastic.co/t/best-english-stemmer-in-elasticsearch/201167)
**Author:** [@uhbnhy](https://discuss.elastic.co/u/uhbnhy)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:04pm UTC](https://discuss.elastic.co/t/best-english-stemmer-in-elasticsearch/201167 "2019-09-26T14:04:18Z")
what is the best english stemmer in elasticsearch? --- ## [Can't parse custom grok expression responsible for extracting file extension](https://discuss.elastic.co/t/cant-parse-custom-grok-expression-responsible-for-extracting-file-extension/201247)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:01pm UTC](https://discuss.elastic.co/t/cant-parse-custom-grok-expression-responsible-for-extracting-file-extension/201247 "2019-09-26T14:01:30Z")
Hello, I'm using custom grok pattern to extract file extension from field called message Here's the configuration snippet: filter { grok { match =\> { "message" =\> "(?\(\\.\[^.\\\\/:\*?"\<\>|\\r\\n\]+$))" } }} … --- ## [Find user on multiple condition after aggregation result](https://discuss.elastic.co/t/find-user-on-multiple-condition-after-aggregation-result/201171)
**Author:** [@vaibhav\_morye](https://discuss.elastic.co/u/vaibhav_morye)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 2:00pm UTC](https://discuss.elastic.co/t/find-user-on-multiple-condition-after-aggregation-result/201171 "2019-09-26T14:00:39Z")
I want to find user who have user\_action searched-for-cake and got-cake. sample index is as follow. { { user\_id:"ad97b3fe-0d55-4133-9367-1", user\_action:"searched-for-cake" }, { user\_id:"ad97b3fe-0d55-4133-93… --- ## [ElasticSearch 7.3.x with openJDK 12](https://discuss.elastic.co/t/elasticsearch-7-3-x-with-openjdk-12/201198)
**Author:** [@Konathala\_Naveen](https://discuss.elastic.co/u/Konathala_Naveen)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-x-with-openjdk-12/201198 "2019-09-26T13:57:13Z")
Why elasticsearch 7.3.x is bundled with Openjdk 12 which is non LTS??? Elasticsearch recommends to use the LTS JDK versions like 8 or 11. --- ## [Search issues - beginner user in need of guidance :)](https://discuss.elastic.co/t/search-issues-beginner-user-in-need-of-guidance/201241)
**Author:** [@roomman](https://discuss.elastic.co/u/roomman)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 1:55pm UTC](https://discuss.elastic.co/t/search-issues-beginner-user-in-need-of-guidance/201241 "2019-09-26T13:55:45Z")
Hello! We've got an implementation of ElasticSearch up and running in order to provide basic search in our web app. Our app stores the names and addresses of businesses, along with other relevant information like billing… --- ## [Ingestion through coordinate node](https://discuss.elastic.co/t/ingestion-through-coordinate-node/201152)
**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\ **Replies:** 3\ **Last updated:** [September 26, 2019, 1:51pm UTC](https://discuss.elastic.co/t/ingestion-through-coordinate-node/201152 "2019-09-26T13:51:17Z")
I'm trying to ingest 1.5 PB of data into elastic search. My question is, if I ingest data directly through co-ordinate nodes instead of using data nodes, what will be the consequences and how it will affect the performan… --- ## [Kibana development](https://discuss.elastic.co/t/kibana-development/200924)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 1:50pm UTC](https://discuss.elastic.co/t/kibana-development/200924 "2019-09-26T13:50:07Z")
The link above describes the installation steps necessary to develop code for kibana. after I say yarn start does not work. do you share extension information to run it in a development environment? for example, C: … --- ## [Nested Query Help to find documents where all nested documents match a given criteria](https://discuss.elastic.co/t/nested-query-help-to-find-documents-where-all-nested-documents-match-a-given-criteria/200923)
**Author:** [@RahulD](https://discuss.elastic.co/u/RahulD)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 1:48pm UTC](https://discuss.elastic.co/t/nested-query-help-to-find-documents-where-all-nested-documents-match-a-given-criteria/200923 "2019-09-26T13:48:59Z")
Hi, I was wondering if it is possible to find documents in ElasticSearch using a nested query where all nested documents within a document match a given criteria? Thanks. --- ## [Repo to upgrade from 6.7 to 7.3.1](https://discuss.elastic.co/t/repo-to-upgrade-from-6-7-to-7-3-1/201245)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 1:46pm UTC](https://discuss.elastic.co/t/repo-to-upgrade-from-6-7-to-7-3-1/201245 "2019-09-26T13:46:23Z")
Hello, I want to upgrade from 6.7 to 7.3.1 specifically I created the below repo \[elasticsearch-7.3.1\] name=Elasticsearch repository for 7.3.1 packages baseurl=https://artifacts.elastic.co/packages/7.3.1/yum gpgcheck=… --- ## [Kibana: Как построить график количества событий в секунду](https://discuss.elastic.co/t/kibana/200038)
**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\ **Replies:** 11\ **Last updated:** [September 26, 2019, 1:33pm UTC](https://discuss.elastic.co/t/kibana/200038 "2019-09-26T13:33:17Z")
Добрый день. Как, в Кибане, построить график, отображающий количество событий/документов в секунду. Я понимаю, что это задачу можно решить, изменив параметры диаграммы: Но, параметры графика сильно зависят от исполь… --- ## [Clone ES indexes to the new Cluster](https://discuss.elastic.co/t/clone-es-indexes-to-the-new-cluster/201191)
**Author:** [@Stayler](https://discuss.elastic.co/u/Stayler)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 1:26pm UTC](https://discuss.elastic.co/t/clone-es-indexes-to-the-new-cluster/201191 "2019-09-26T13:26:50Z")
Gentleman, hello. Am I new to ElasticSearch, so be patient. At some point, I realized that I needed to scale the existing cluster horizontally due to the lack of bandwidth of the disk subsystem. Along the way, I decide… --- ## [Upgrading elasticsearch version on ECK](https://discuss.elastic.co/t/upgrading-elasticsearch-version-on-eck/201222)
**Author:** [@Bozo\_Tegeltija](https://discuss.elastic.co/u/Bozo_Tegeltija)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 12:58pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-version-on-eck/201222 "2019-09-26T12:58:17Z")
How should I approach upgrading the version of Elasticsearch? Can operator handle just changing the configuration from version: 7.2.0 -\> 7.3.0 and kubectl apply? --- ## [Index作成時のtype指定について](https://discuss.elastic.co/t/index-type/201166)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 12:54pm UTC](https://discuss.elastic.co/t/index-type/201166 "2019-09-26T12:54:42Z")
Elasticsearchはver7.0からタイプレスAPIになったということで、 index一つに付き一つのtypeしか許容されない認識ですが、 ↑この記事のCustom type fieldの項目を読むと PUT twitter { "mappings": { "user": { "properties": { "name": { "type": "text" }, "user\_name": { "type":… --- ## [Elasticsearch ranking aggregation with multiple terms query](https://discuss.elastic.co/t/elasticsearch-ranking-aggregation-with-multiple-terms-query/201219)
**Author:** [@Azeem\_Akhtar](https://discuss.elastic.co/u/Azeem_Akhtar)\ **Replies:** 1\ **Last updated:** [September 26, 2019, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-ranking-aggregation-with-multiple-terms-query/201219 "2019-09-26T11:42:29Z")
I have two indices documents and recommendations with the following mappings: Documents: { "id": string, "document\_text" : string, "author" : { "name": string } ...other fields } Recommendations: { … --- ## [Cannot bind to localhost 5000 port](https://discuss.elastic.co/t/cannot-bind-to-localhost-5000-port/201216)
**Author:** [@jacobmathews](https://discuss.elastic.co/u/jacobmathews)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 11:19am UTC](https://discuss.elastic.co/t/cannot-bind-to-localhost-5000-port/201216 "2019-09-26T11:19:49Z")
hi...I am not able to connect to my localhost 5000 port in which I have configured by logstash…I am attaching a screenshot of my "filebeat test output",logstash input conf and filebeat.yml configurations.kindly help me w… --- ## [Logstash pipeline in a transaction](https://discuss.elastic.co/t/logstash-pipeline-in-a-transaction/199661)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 11:00am UTC](https://discuss.elastic.co/t/logstash-pipeline-in-a-transaction/199661 "2019-09-26T11:00:29Z")
Hi All, I have to create two separate Elasticsearch output indices from the received data with Logstash. Till now it is a simple case, but I have to do the insertion into the indices in a transaction - if the insertion … --- ## [Logs are not showing from APM](https://discuss.elastic.co/t/logs-are-not-showing-from-apm/201049)
**Author:** [@mahendra.garg](https://discuss.elastic.co/u/mahendra.garg)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 10:50am UTC](https://discuss.elastic.co/t/logs-are-not-showing-from-apm/201049 "2019-09-26T10:50:12Z")
Hello Guys I have configured the Kibana, APM, elasticsearch, For APM I have created a domain https://example.com as APM Agent in flask application, When I run the application on development environment logs are getting … --- ## [Does any one know which file to edit to embed a navbar in kibana ui?](https://discuss.elastic.co/t/does-any-one-know-which-file-to-edit-to-embed-a-navbar-in-kibana-ui/200638)
**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\ **Replies:** 8\ **Last updated:** [September 26, 2019, 10:26am UTC](https://discuss.elastic.co/t/does-any-one-know-which-file-to-edit-to-embed-a-navbar-in-kibana-ui/200638 "2019-09-26T10:26:36Z")
I want to add a navbar in kibana 6.8. I have asked this question previously, however it was suggested to use iframe. Instead of using Iframe I want to append the code directly to the source code of kibana. Please help. … --- ## [Kubernetes state\_pod, state\_node, state\_container information missing in Kubernetes dashboard](https://discuss.elastic.co/t/kubernetes-state-pod-state-node-state-container-information-missing-in-kubernetes-dashboard/201206)
**Author:** [@Surya369](https://discuss.elastic.co/u/Surya369)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 10:14am UTC](https://discuss.elastic.co/t/kubernetes-state-pod-state-node-state-container-information-missing-in-kubernetes-dashboard/201206 "2019-09-26T10:14:58Z")
Hi there, I am unable to get the kube-state -metrics in the Kibana Kubernetes dashboard. I have checked in the discover tab and find that the kube-state-metrics server is getting connected during some instances of time… --- ## [Cannot allocate because all found copies of the shard are either stale or corrupt](https://discuss.elastic.co/t/cannot-allocate-because-all-found-copies-of-the-shard-are-either-stale-or-corrupt/201202)
**Author:** [@Lakshman\_Singh](https://discuss.elastic.co/u/Lakshman_Singh)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 9:58am UTC](https://discuss.elastic.co/t/cannot-allocate-because-all-found-copies-of-the-shard-are-either-stale-or-corrupt/201202 "2019-09-26T09:58:22Z")
nested: IndexShardRecoveryException\[failed to fetch index version after copying it over\]; nested: IndexShardRecoveryException\[shard allocated for local recovery (post api), should exist, but doesn't, current files: \]; ne… --- ## [Cluster Reroute Retry Failed Null Pointer Exception](https://discuss.elastic.co/t/cluster-reroute-retry-failed-null-pointer-exception/201204)
**Author:** [@Bellicapelli0](https://discuss.elastic.co/u/Bellicapelli0)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 10:01am UTC](https://discuss.elastic.co/t/cluster-reroute-retry-failed-null-pointer-exception/201204 "2019-09-26T10:01:24Z")
Good morning everyone. Last night one of the machines with one of the nodes of my cluster shutdown, so this morning I restarted it and waited for shard allocation. After waiting for a while, the restarted node only had … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1871) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1873)