# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1933 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1934 --- ## [String contains Substring Search across one or more fields](https://discuss.elastic.co/t/string-contains-substring-search-across-one-or-more-fields/196828)
**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:29am UTC](https://discuss.elastic.co/t/string-contains-substring-search-across-one-or-more-fields/196828 "2019-08-28T11:29:23Z")
Hello. I am looking for analysis and mapping setting recommendations that would allow me to perform searches that answer 'does string Y contain substring X?'. For example, given the sample data: \[ { "name": { … --- ## [Licence error after starting Logstash](https://discuss.elastic.co/t/licence-error-after-starting-logstash/197095)
**Author:** [@\_bawaji](https://discuss.elastic.co/u/_bawaji)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 11:27am UTC](https://discuss.elastic.co/t/licence-error-after-starting-logstash/197095 "2019-08-28T11:27:35Z")
I installed ES first, it worked fine. Then installed Kibana, both Kibana and ES worked fine after enabling Authentication as well. Now installed Logstash, faced issues while starting, now managed to start it but getting… --- ## [Dedup Help!](https://discuss.elastic.co/t/dedup-help/196823)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:25am UTC](https://discuss.elastic.co/t/dedup-help/196823 "2019-08-28T11:25:25Z")
Hello All, I am attempting to use DEDUP command in Kibana, via the Query DSL. { "exists": { "field": "TSID" }, "dedup": true } Getting this error: Discover: \[parsing\_exception\] \[exists\] malformed query, exp… --- ## [Unable to do range and script query on the same field](https://discuss.elastic.co/t/unable-to-do-range-and-script-query-on-the-same-field/196862)
**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:22am UTC](https://discuss.elastic.co/t/unable-to-do-range-and-script-query-on-the-same-field/196862 "2019-08-28T11:22:32Z")
I am trying to do a query which has range and script operations on a field, I am able to run the query only if use either of the range or script operation, but not together. Following is the query - GET /listings/\_se… --- ## [Fluentd is not able to forward data to elasticsearch](https://discuss.elastic.co/t/fluentd-is-not-able-to-forward-data-to-elasticsearch/196899)
**Author:** [@skdasari](https://discuss.elastic.co/u/skdasari)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 8:21am UTC](https://discuss.elastic.co/t/fluentd-is-not-able-to-forward-data-to-elasticsearch/196899 "2019-08-27T08:21:42Z")
I am trying to forward my local server log from windows to an elasticsearch server in a linux machine and check these logs in the kibana. This is test environment currently. fuentd on either ends is not showing any issue… --- ## [Problem with dynamic template](https://discuss.elastic.co/t/problem-with-dynamic-template/196922)
**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:18am UTC](https://discuss.elastic.co/t/problem-with-dynamic-template/196922 "2019-08-28T11:18:29Z")
Delete post --- ## [Can we set a fixed size for every shard?How?](https://discuss.elastic.co/t/can-we-set-a-fixed-size-for-every-shard-how/196885)
**Author:** [@lauea](https://discuss.elastic.co/u/lauea)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:16am UTC](https://discuss.elastic.co/t/can-we-set-a-fixed-size-for-every-shard-how/196885 "2019-08-28T11:16:43Z")
As the subject, can we set a fixed size for every shard? And How? Only can I search related documents to set the watermater based on total disk size. https://www.elastic.co/guide/en/elasticsearch/reference/6.7/disk-all… --- ## [What is Problem with Multiple Range Filter?](https://discuss.elastic.co/t/what-is-problem-with-multiple-range-filter/196974)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:10am UTC](https://discuss.elastic.co/t/what-is-problem-with-multiple-range-filter/196974 "2019-08-28T11:10:54Z")
GET bliad4/\_search { "query":{ "bool":{ "filter":\[ { "terms":{ "categories.id":\[ 9 \] } }, { "terms":{ "deleted":\[ false \] } }, { "terms":{ "published":\[ true \] } }, { "range": { "VendorMinPric… --- ## [Another @timestamp question... non-standard timestamp transformation](https://discuss.elastic.co/t/another-timestamp-question-non-standard-timestamp-transformation/197017)
**Author:** [@Kalydrae](https://discuss.elastic.co/u/Kalydrae)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 11:08am UTC](https://discuss.elastic.co/t/another-timestamp-question-non-standard-timestamp-transformation/197017 "2019-08-28T11:08:13Z")
Hi there, I'm new to all of this. I'm using Logstash with Elastic Search and finding the @timestamp transformation frustrating for my non-standard log format. Any help you can provide me would be appreciated. Here is … --- ## [ElasticSearch - docs deleted count reduced](https://discuss.elastic.co/t/elasticsearch-docs-deleted-count-reduced/196729)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-docs-deleted-count-reduced/196729 "2019-08-28T11:08:03Z")
Hi For debugging I have checked one of currently writing indices shows the following results 4 days before the following response i got health status index … --- ## [Exact match on large float](https://discuss.elastic.co/t/exact-match-on-large-float/197091)
**Author:** [@carasel](https://discuss.elastic.co/u/carasel)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:07am UTC](https://discuss.elastic.co/t/exact-match-on-large-float/197091 "2019-08-28T11:07:48Z")
I have a field mapped as a float, which is currently storing very large numbers. When I try to search for an exact match on this field, I often end up with results which are not exact matches: "query": { "constant\_sco… --- ## [Index lifecycle policies not working](https://discuss.elastic.co/t/index-lifecycle-policies-not-working/197092)
**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 11:02am UTC](https://discuss.elastic.co/t/index-lifecycle-policies-not-working/197092 "2019-08-28T11:02:16Z")
Hi, I have a very simple setup at present, just a single rollover policy to create a new index every 4gb or 1day but it\`s not working and the index is still growing over that limit. Any help would be awesome :slight\_sm… --- ## [Cant start ES because too many shards](https://discuss.elastic.co/t/cant-start-es-because-too-many-shards/196792)
**Author:** [@chrism1](https://discuss.elastic.co/u/chrism1)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 10:48am UTC](https://discuss.elastic.co/t/cant-start-es-because-too-many-shards/196792 "2019-08-28T10:48:23Z")
We have an ES installation where we have 4000 indexes and 40,000 shards. Its clear that this is not a good idea, but we cant get Elastic to start to do anything about it. Any ideas how we can get Elastic to start up? We… --- ## [Elasticsearch 7.0 can't bind to private address](https://discuss.elastic.co/t/elasticsearch-7-0-cant-bind-to-private-address/195353)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-7-0-cant-bind-to-private-address/195353 "2019-08-28T10:37:55Z")
Hi! I've just set up two ES nodes on GCP VMs. However, I can't set up it in a way the two of those can discover each other by private IP and no requests for the public IP would be answered. The configuration on both nod… --- ## [Plugin install -\> jruby.exe: command not found](https://discuss.elastic.co/t/plugin-install-jruby-exe-command-not-found/197085)
**Author:** [@Sindre\_E\_de\_Lange](https://discuss.elastic.co/u/Sindre_E_de_Lange)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 10:21am UTC](https://discuss.elastic.co/t/plugin-install-jruby-exe-command-not-found/197085 "2019-08-28T10:21:50Z")
When I try to install the BigQuery plugin, such that I can stream data from server, via Logstash, to BigQuery: bin/logstash-plugin install logstash-output-google\_bigquery I receive the error message saying /\ **Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 9:49am UTC](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart/197031 "2019-08-28T09:49:41Z") Macintosh:~ developer$ elasticsearch Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Exception in thread "main" 2019-08-2… --- ## [How to use custom GeoIP2 database in elasticsearch?](https://discuss.elastic.co/t/how-to-use-custom-geoip2-database-in-elasticsearch/196507)
**Author:** [@icamys](https://discuss.elastic.co/u/icamys)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-use-custom-geoip2-database-in-elasticsearch/196507 "2019-08-28T09:47:35Z")
Hello! I'm using dockerized elasticsearch7.3 on my local machine and I'm trying to use my GeoIP2-City.mmdb to add geoip info. I've read the length and breadth of the official geoip processor description and I still can… --- ## [Shrinking a large cluster](https://discuss.elastic.co/t/shrinking-a-large-cluster/197076)
**Author:** [@dolsson](https://discuss.elastic.co/u/dolsson)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:37am UTC](https://discuss.elastic.co/t/shrinking-a-large-cluster/197076 "2019-08-28T09:37:45Z")
Hi, We have a scenario where we need to shrink a 60 data-node (+ 1 master) cluster down to just 30 data nodes. The cluster currently holds about 1.8PB of data and each data node is a powerful bare metal server connected… --- ## [Graylog-sidecar and auditbeats - ERRO\[0040\] \[auditbeat\] Unable to validate configuration, timeout reached](https://discuss.elastic.co/t/graylog-sidecar-and-auditbeats-erro-0040-auditbeat-unable-to-validate-configuration-timeout-reached/197075)
**Author:** [@pandzioo](https://discuss.elastic.co/u/pandzioo)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:34am UTC](https://discuss.elastic.co/t/graylog-sidecar-and-auditbeats-erro-0040-auditbeat-unable-to-validate-configuration-timeout-reached/197075 "2019-08-28T09:34:11Z")
First of all I would like to say Hello :slight\_smile: I would like to say that I'm new in Elastic topics - I need help. I installed elastic search and graylog for collecting logs from linux environment. I have many li… --- ## [Visualize aggs min as sub bucket](https://discuss.elastic.co/t/visualize-aggs-min-as-sub-bucket/196431)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 9:24am UTC](https://discuss.elastic.co/t/visualize-aggs-min-as-sub-bucket/196431 "2019-08-28T09:24:21Z")
Hello all, I have the below elasticsearch query GET /monthly-data/\_search { "size": 0, "aggs": { "accname": { "terms": { "field": "User.keyword" }, "aggs": { "year ": { "terms": { "field": "Year.keyword" }… --- ## [How to remove elasticsearch indices storage completly](https://discuss.elastic.co/t/how-to-remove-elasticsearch-indices-storage-completly/195904)
**Author:** [@amolp](https://discuss.elastic.co/u/amolp)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 9:24am UTC](https://discuss.elastic.co/t/how-to-remove-elasticsearch-indices-storage-completly/195904 "2019-08-28T09:24:09Z")
Hi Experts I have configured elasticsearch on aws ec2 instance and I am keeping data of one month over ebs volume, and deleting it after every one month by using curator, but still, storage is increasing day by day. he… --- ## [Migrating elasticsearch data](https://discuss.elastic.co/t/migrating-elasticsearch-data/196905)
**Author:** [@ShahafSW](https://discuss.elastic.co/u/ShahafSW)\ **Replies:** 7\ **Last updated:** [August 28, 2019, 9:03am UTC](https://discuss.elastic.co/t/migrating-elasticsearch-data/196905 "2019-08-28T09:03:07Z")
Hey Everyone, I have this situation that I have a disconnected elasticsearch\[1\] environment and I need to transfer the data to another elasticsearch\[2\] cluster. I was thinking to export all of the data from \[1\] to a Js… --- ## [Rubygems could not find valid gem logstash-output-s3?](https://discuss.elastic.co/t/rubygems-could-not-find-valid-gem-logstash-output-s3/196780)
**Author:** [@KalleDania](https://discuss.elastic.co/u/KalleDania)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 8:09am UTC](https://discuss.elastic.co/t/rubygems-could-not-find-valid-gem-logstash-output-s3/196780 "2019-08-28T08:09:28Z")
Am trying to write a dockerfile that sets up logstash aswell as a logstash output plugin for AWS S3. This: https://rubygems.org/gems/logstash-output-s3 However i keep getting errors, and ive tried other gems too where … --- ## [Problem in running elasticsearch](https://discuss.elastic.co/t/problem-in-running-elasticsearch/197035)
**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:51am UTC](https://discuss.elastic.co/t/problem-in-running-elasticsearch/197035 "2019-08-28T07:51:14Z")
Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Exception in thread "main" 2019-08-28 10:44:46,645 main ERROR No Log4j 2 … --- ## [Use lucene FacetField instead of Elasticsearch MutiBucketCollector to improve performance](https://discuss.elastic.co/t/use-lucene-facetfield-instead-of-elasticsearch-mutibucketcollector-to-improve-performance/197044)
**Author:** [@YinRong](https://discuss.elastic.co/u/YinRong)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 7:03am UTC](https://discuss.elastic.co/t/use-lucene-facetfield-instead-of-elasticsearch-mutibucketcollector-to-improve-performance/197044 "2019-08-28T07:03:03Z")
I'm doing aggs.terms (StringTermsAggregator) on 300 fields, which takes 60~100ms (there are 300 docs after query/filter). If using lucene org.apache.lucene.facet.FacetsCollector, it takes 10ms. Is there a way to use lu… --- ## [Root mapping definition has unsupported parameters: \[\_size : {enabled=true}\]](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-size-enabled-true/193971)
**Author:** [@loknath\_sudhakar](https://discuss.elastic.co/u/loknath_sudhakar)\ **Replies:** 5\ **Last updated:** [August 28, 2019, 7:04am UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-size-enabled-true/193971 "2019-08-28T07:04:22Z")
Hello, I have installed ES 6.5.4 in my cluster. Also installed Size plugin 6.5.4. After restarting the cluster, tried creating an index with mappings as follows: PUT test\_index/ { "mappings": { "my\_type": { … --- ## [\[resolved\]\[Kibana\]How to add below filter panel in a Dashboard](https://discuss.elastic.co/t/resolved-kibana-how-to-add-below-filter-panel-in-a-dashboard/197021)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:00am UTC](https://discuss.elastic.co/t/resolved-kibana-how-to-add-below-filter-panel-in-a-dashboard/197021 "2019-08-28T07:00:05Z")
Hello team, When I reading Kibana User Guide-\>Dashboard Guide, I see a picture where adding a filter panel into the Dashboard. Please refer to below screenshot. How to add such filter panel? Is such filter panel apply… --- ## [Applying Bucket aggregation to the output of Pipeline aggregation](https://discuss.elastic.co/t/applying-bucket-aggregation-to-the-output-of-pipeline-aggregation/197040)
**Author:** [@G-K-Patel](https://discuss.elastic.co/u/G-K-Patel)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 6:24am UTC](https://discuss.elastic.co/t/applying-bucket-aggregation-to-the-output-of-pipeline-aggregation/197040 "2019-08-28T06:24:51Z")
Hi all ES lovers, I was wondering if it is somehow possible to apply bucket aggregation to the output of a pipeline aggregation. I have the following usecase, There is a software that runs over variable amount of time… --- ## [How to split values from a column in a table in Kibana?](https://discuss.elastic.co/t/how-to-split-values-from-a-column-in-a-table-in-kibana/196531)
**Author:** [@whalien52](https://discuss.elastic.co/u/whalien52)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 5:37am UTC](https://discuss.elastic.co/t/how-to-split-values-from-a-column-in-a-table-in-kibana/196531 "2019-08-28T05:37:25Z")
Hi guys, I am trying to visualize a Data Table where there is a field called transactiondata which is a column in the table and the column contains values like Key1:Value1. What I need to do is I need to display only v… --- ## [Windows event not picked by elasticsearch](https://discuss.elastic.co/t/windows-event-not-picked-by-elasticsearch/197029)
**Author:** [@JustinJ](https://discuss.elastic.co/u/JustinJ)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 5:06am UTC](https://discuss.elastic.co/t/windows-event-not-picked-by-elasticsearch/197029 "2019-08-28T05:06:50Z")
I am using the following architecture: Central event Collector(CEC) (With winlogbeat and filebeat)--\>\>\>Ingest Nodes--\>\>\>Data Nodes--\>\>\>Kibana. The CEC is a windows server and is configured to push all security events. F… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1932) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1934)