# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1942

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1943

---

## [Elasticsearch Cluster and best setup](https://discuss.elastic.co/t/elasticsearch-cluster-and-best-setup/196517)

<div class="topic-metadata">

**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\
**Replies:** 0\
**Last updated:** [August 23, 2019, 12:23pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-and-best-setup/196517 "2019-08-23T12:23:58Z")

</div>

I have 2 Windows servers with the following on each server. I have a couple of questions. Can and should Logstash send data to both Elasticsearch nodes for load balance? Should I put Logstash on a server by itself or …

---

## [Canvas ESSQL current date - 30 days query](https://discuss.elastic.co/t/canvas-essql-current-date-30-days-query/193486)

<div class="topic-metadata">

**Author:** [@samgs](https://discuss.elastic.co/u/samgs)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 12:14pm UTC](https://discuss.elastic.co/t/canvas-essql-current-date-30-days-query/193486 "2019-08-23T12:14:21Z")

</div>

Hello! I'm trying to make a relative date query in elasticsearch SQL. I have this code: SELECT \* FROM index WHERE date \> CURRENT\_DATE - INTERVAL '30' DAY Which seems to be correct. However when I run it, it gives the f…

---

## [Why inverted index is not good at Aggregation?](https://discuss.elastic.co/t/why-inverted-index-is-not-good-at-aggregation/196298)

<div class="topic-metadata">

**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\
**Replies:** 11\
**Last updated:** [August 23, 2019, 11:21am UTC](https://discuss.elastic.co/t/why-inverted-index-is-not-good-at-aggregation/196298 "2019-08-23T11:21:56Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/fielddata.html#fielddata this section of docs say sort and aggregation is another pattern to search: search with inverted index: Which documents contain …

---

## [Elasticsearch query like not working when search number and string in 1 words using wildcardquery and match\_phrase](https://discuss.elastic.co/t/elasticsearch-query-like-not-working-when-search-number-and-string-in-1-words-using-wildcardquery-and-match-phrase/196499)

<div class="topic-metadata">

**Author:** [@Asep\_Kusnandar](https://discuss.elastic.co/u/Asep_Kusnandar)\
**Replies:** 0\
**Last updated:** [August 23, 2019, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-query-like-not-working-when-search-number-and-string-in-1-words-using-wildcardquery-and-match-phrase/196499 "2019-08-23T10:43:36Z")

</div>

How can i search query like with match\_phrase query when i search key example : "50Fit bintaro" my mapping { "settings": { "analysis": { "analyzer": { "my\_analyzer": { "tokenizer": "standard", "filter": \[ "lowercase", …

---

## [ElasticSearch for the Log Search in Zipped Archives Usecase](https://discuss.elastic.co/t/elasticsearch-for-the-log-search-in-zipped-archives-usecase/191395)

<div class="topic-metadata">

**Author:** [@Manug](https://discuss.elastic.co/u/Manug)\
**Replies:** 3\
**Last updated:** [August 23, 2019, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-for-the-log-search-in-zipped-archives-usecase/191395 "2019-08-23T10:53:11Z")

</div>

Hi, I have the following usecase and I want to find out if I can use elasticsearch for it. If yes, then how can I implement it. Usecase: I want to search log archives for any kind of string. I have log archives from …

---

## [Kibana dashboard only User](https://discuss.elastic.co/t/kibana-dashboard-only-user/194155)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 8\
**Last updated:** [August 23, 2019, 10:06am UTC](https://discuss.elastic.co/t/kibana-dashboard-only-user/194155 "2019-08-23T10:06:59Z")

</div>

Hi, I have setup kibana 7.3 i need some of my teammates to view only the kibana dashboard so i created the new user and assigned role as kibana dashboard only user the user was successfully created.When they login login…

---

## [Ingesting pdf in angular 7](https://discuss.elastic.co/t/ingesting-pdf-in-angular-7/196065)

<div class="topic-metadata">

**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\
**Replies:** 3\
**Last updated:** [August 23, 2019, 9:53am UTC](https://discuss.elastic.co/t/ingesting-pdf-in-angular-7/196065 "2019-08-23T09:53:08Z")

</div>

Can I ingest directly a document inside the angular (without parsing it) ?

---

## [Compile error when using sparse vector and cosine similarity](https://discuss.elastic.co/t/compile-error-when-using-sparse-vector-and-cosine-similarity/196474)

<div class="topic-metadata">

**Author:** [@Pablo\_gps](https://discuss.elastic.co/u/Pablo_gps)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 9:30am UTC](https://discuss.elastic.co/t/compile-error-when-using-sparse-vector-and-cosine-similarity/196474 "2019-08-23T09:30:47Z")

</div>

I am trying to use the new functionality for vector fields, but I am running into problems. Let me break down the problem for you: My documents are json files, with this structure: {"name": "doc\_name", "field\_1": "doc\_…

---

## [Parse json with mapper\_parsing\_exception](https://discuss.elastic.co/t/parse-json-with-mapper-parsing-exception/196344)

<div class="topic-metadata">

**Author:** [@thwint](https://discuss.elastic.co/u/thwint)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 9:26am UTC](https://discuss.elastic.co/t/parse-json-with-mapper-parsing-exception/196344 "2019-08-23T09:26:19Z")

</div>

Hello, We are indexing and parsing logfiles containing JSON requests (one per line). We have multiple, completely different request. Most of them can be indexed without any problems. But we have some requests which incl…

---

## [Periodic ES ReadTimeout Error](https://discuss.elastic.co/t/periodic-es-readtimeout-error/195341)

<div class="topic-metadata">

**Author:** [@Ritesh\_Agrawal](https://discuss.elastic.co/u/Ritesh_Agrawal)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 9:19am UTC](https://discuss.elastic.co/t/periodic-es-readtimeout-error/195341 "2019-08-23T09:19:47Z")

</div>

I have a 2 node es cluster (4 core 16GB) config. I am getting read timeout error on 10th minute of every hour. All the scheduled processes from the application is stopped. So nothing scheduled from application side. So I…

---

## [Question about adding geo\_point and updating mappings in general](https://discuss.elastic.co/t/question-about-adding-geo-point-and-updating-mappings-in-general/196265)

<div class="topic-metadata">

**Author:** [@Sempiterna](https://discuss.elastic.co/u/Sempiterna)\
**Replies:** 4\
**Last updated:** [August 22, 2019, 3:35pm UTC](https://discuss.elastic.co/t/question-about-adding-geo-point-and-updating-mappings-in-general/196265 "2019-08-22T15:35:37Z")

</div>

I've been trying for a few days now to add custom mapping (geo\_point) to my elasticsearch server. This server has daily created indices "filebeat-2019.08.22". However, all documentation tells me I need to update the tem…

---

## [java.lang.IllegalStateException: Failed to close the XContentBuilder (Elasticsearch 6.8.1)](https://discuss.elastic.co/t/java-lang-illegalstateexception-failed-to-close-the-xcontentbuilder-elasticsearch-6-8-1/195431)

<div class="topic-metadata">

**Author:** [@aditshrimal7](https://discuss.elastic.co/u/aditshrimal7)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 9:09am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-failed-to-close-the-xcontentbuilder-elasticsearch-6-8-1/195431 "2019-08-23T09:09:10Z")

</div>

Hi, I am consuming data from Apache Kafka and transforming it with Apache Flink, and then inserting it in Elasticsearch. But I get the following errors and my flink job fails. Please can someone tell me why am I facing t…

---

## [Don't pick me up the Logs of / var / log / httpd / access\_log](https://discuss.elastic.co/t/dont-pick-me-up-the-logs-of-var-log-httpd-access-log/196293)

<div class="topic-metadata">

**Author:** [@cristianaxion](https://discuss.elastic.co/u/cristianaxion)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 9:03am UTC](https://discuss.elastic.co/t/dont-pick-me-up-the-logs-of-var-log-httpd-access-log/196293 "2019-08-23T09:03:31Z")

</div>

Hi, I want to link the logs of / var / log / httpd / access\_log in kibana but I didn't pick them up ... I just picked up the logs located in var / log / messages ....Help Pleaseeeeee!!!!! Is urgent.

---

## [Elasticsearch Deleting a field in an index](https://discuss.elastic.co/t/elasticsearch-deleting-a-field-in-an-index/196329)

<div class="topic-metadata">

**Author:** [@astrobalaji](https://discuss.elastic.co/u/astrobalaji)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-deleting-a-field-in-an-index/196329 "2019-08-23T08:53:21Z")

</div>

Hi, I have an index that is being populated in realtime. However, I have one field in the index which I don't need anymore. Is there anyway to delete just one field from an index for all documents? Thanks in advance. …

---

## [Maps / Apply global filter to main vector layer and/or joined source only](https://discuss.elastic.co/t/maps-apply-global-filter-to-main-vector-layer-and-or-joined-source-only/196247)

<div class="topic-metadata">

**Author:** [@fxprunayre](https://discuss.elastic.co/u/fxprunayre)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 8:23am UTC](https://discuss.elastic.co/t/maps-apply-global-filter-to-main-vector-layer-and-or-joined-source-only/196247 "2019-08-23T08:23:04Z")

</div>

Hi, Would it make sense to add an option to decide if the global filter has to be applied to the vector layer and/or the join layer only? In a number of situation, the vector layer may be a background map (eg. admin bo…

---

## [Why match query is not working with elastic-search 7.3](https://discuss.elastic.co/t/why-match-query-is-not-working-with-elastic-search-7-3/196469)

<div class="topic-metadata">

**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\
**Replies:** 0\
**Last updated:** [August 23, 2019, 8:20am UTC](https://discuss.elastic.co/t/why-match-query-is-not-working-with-elastic-search-7-3/196469 "2019-08-23T08:20:41Z")

</div>

Dear All. I have written query on elastic search 2.4 that is working match as like %g% operator:- when i passed only 'g' then it display all firstname with 'g' \` { "query": { "bool": { "must": { "bool" : { "shoul…

---

## [Passing user and password from Angulat to kibana Iframe](https://discuss.elastic.co/t/passing-user-and-password-from-angulat-to-kibana-iframe/195902)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 8:08am UTC](https://discuss.elastic.co/t/passing-user-and-password-from-angulat-to-kibana-iframe/195902 "2019-08-23T08:08:22Z")

</div>

hi guys , i'm new to the ELK stack , so i have an angular web application that displays iframe kibana dashboard , so my problem is that kibana asks for user and password in the application and i have already a login page…

---

## [Apply order: Template vs mapping](https://discuss.elastic.co/t/apply-order-template-vs-mapping/196414)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 7:16am UTC](https://discuss.elastic.co/t/apply-order-template-vs-mapping/196414 "2019-08-23T07:16:42Z")

</div>

Does anybody know the order in which a new index's mapping is created? You can create a new Index with mapping. If there's a template applicable for the index, what's the order? The official doc only describe the orde…

---

## [.NET Core elastic not working in server](https://discuss.elastic.co/t/net-core-elastic-not-working-in-server/196443)

<div class="topic-metadata">

**Author:** [@DotNetLoper](https://discuss.elastic.co/u/DotNetLoper)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 7:12am UTC](https://discuss.elastic.co/t/net-core-elastic-not-working-in-server/196443 "2019-08-23T07:12:20Z")

</div>

I have tested ElasticSearch in my localhost, it is working fine. But when I deployed to hosting server, it is not working. I use asphostportal.com. This is my code: {public static class ElasticsearchExtensio…

---

## [\_search request. Get only objects / elements inside hits?](https://discuss.elastic.co/t/search-request-get-only-objects-elements-inside-hits/196456)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 7:07am UTC](https://discuss.elastic.co/t/search-request-get-only-objects-elements-inside-hits/196456 "2019-08-23T07:07:31Z")

</div>

Hi, I want to query elasticsearch for exporting a subset of data to be able to import it into a separate elasticsearch instance, which is not connected. Also I need to export as plain text, that the exporter is able to …

---

## [How does coordinator nodes in docker and master node in physical server interacts, i have ES 6.3 installed](https://discuss.elastic.co/t/how-does-coordinator-nodes-in-docker-and-master-node-in-physical-server-interacts-i-have-es-6-3-installed/196455)

<div class="topic-metadata">

**Author:** [@sakthivel](https://discuss.elastic.co/u/sakthivel)\
**Replies:** 0\
**Last updated:** [August 23, 2019, 6:51am UTC](https://discuss.elastic.co/t/how-does-coordinator-nodes-in-docker-and-master-node-in-physical-server-interacts-i-have-es-6-3-installed/196455 "2019-08-23T06:51:06Z")

</div>

How does coordinator nodes in docker and master node in physical server interacts, i have ES 6.3 installed. I have 2 coordinator nodes in docker and 3 master nodes in physical server. Both coordinator nodes and master …

---

## [Elapsed time between starting log line ending log in a log file](https://discuss.elastic.co/t/elapsed-time-between-starting-log-line-ending-log-in-a-log-file/194698)

<div class="topic-metadata">

**Author:** [@madhu\_sekar\_Akula](https://discuss.elastic.co/u/madhu_sekar_Akula)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 6:21am UTC](https://discuss.elastic.co/t/elapsed-time-between-starting-log-line-ending-log-in-a-log-file/194698 "2019-08-23T06:21:10Z")

</div>

Hi iam new to logstash i need to find out the elapsed time between starting event date to ending event date in log file ,i dont have any unique ids for starting event and ending events so how to achive this with logstas…

---

## [Passing value of Variables at runtime in Percolate API](https://discuss.elastic.co/t/passing-value-of-variables-at-runtime-in-percolate-api/196433)

<div class="topic-metadata">

**Author:** [@nehacv](https://discuss.elastic.co/u/nehacv)\
**Replies:** 0\
**Last updated:** [August 23, 2019, 3:33am UTC](https://discuss.elastic.co/t/passing-value-of-variables-at-runtime-in-percolate-api/196433 "2019-08-23T03:33:43Z")

</div>

I have some documents with type percolate, with queries defined in them. Each query has a custom script score. I want the script score to be configurable and have a variable which will be passed when searching for the do…

---

## [Saving queries, with nested ANDs and ORs, in Elastic Search for runtime evaluation](https://discuss.elastic.co/t/saving-queries-with-nested-ands-and-ors-in-elastic-search-for-runtime-evaluation/196436)

<div class="topic-metadata">

**Author:** [@nehacv](https://discuss.elastic.co/u/nehacv)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 5:59am UTC](https://discuss.elastic.co/t/saving-queries-with-nested-ands-and-ors-in-elastic-search-for-runtime-evaluation/196436 "2019-08-23T05:59:15Z")

</div>

Problem statement: I have a few hundred entities with certain criteria associated with them. These criteria can be nested with ANDs and ORs. For a given input, entities which satisfy the conditions would be filtered ou…

---

## [Merge search results into single document?](https://discuss.elastic.co/t/merge-search-results-into-single-document/196238)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 5:29am UTC](https://discuss.elastic.co/t/merge-search-results-into-single-document/196238 "2019-08-23T05:29:05Z")

</div>

Hi, I have data the looks like this: { "name":"John" "limit":"100" } { "name":"John" "Spent":150" } { "name":"Ray" "limit":"200" } { "name":"Ray" "Spent":250" } But those are four separate documents. Is it possible…

---

## [Details related to the index](https://discuss.elastic.co/t/details-related-to-the-index/195879)

<div class="topic-metadata">

**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Replies:** 7\
**Last updated:** [August 23, 2019, 5:17am UTC](https://discuss.elastic.co/t/details-related-to-the-index/195879 "2019-08-23T05:17:23Z")

</div>

Hi, I have created many users and i want details regarding which user has updated/created the index. How to find out all the actions performed on the index by the user ? We need to any changes in elastic yml file ? R…

---

## [How elasticsearch query should be written for the following SQL statement?](https://discuss.elastic.co/t/how-elasticsearch-query-should-be-written-for-the-following-sql-statement/196288)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 12\
**Last updated:** [August 23, 2019, 3:27am UTC](https://discuss.elastic.co/t/how-elasticsearch-query-should-be-written-for-the-following-sql-statement/196288 "2019-08-23T03:27:02Z")

</div>

Hello all, I have a SQL statement as below: select min(a.datetime),accname,year from CWLC\_PC a group by accname,year; I have tried many times using agg and max but I cannot get the result as the SQL statement. Please…

---

## [Could not index event to Elasticsearch: Maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/196402)

<div class="topic-metadata">

**Author:** [@Don\_Withanage](https://discuss.elastic.co/u/Don_Withanage)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 1:18am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/196402 "2019-08-23T01:18:23Z")

</div>

I am creating indexes on Elasticsearch daily from metricbeat, auditbeat, winlogbeat, and other logs. I have run into the issue of getting an error on the logstash saying "Validation Failed: this action would add \[2\] tota…

---

## [Logstash can't recognize csv columns](https://discuss.elastic.co/t/logstash-cant-recognize-csv-columns/196396)

<div class="topic-metadata">

**Author:** [@m.thecoder](https://discuss.elastic.co/u/m.thecoder)\
**Replies:** 5\
**Last updated:** [August 23, 2019, 12:01am UTC](https://discuss.elastic.co/t/logstash-cant-recognize-csv-columns/196396 "2019-08-23T00:01:35Z")

</div>

Hello Guys, I've configured logstah to read multiple csv files, each one has a different columns set (different column names), it reads the first one successfully, but it never reads the columns for any csv after readin…

---

## [Saved Objects & Spaces Slow - Kibana 7.3](https://discuss.elastic.co/t/saved-objects-spaces-slow-kibana-7-3/196419)

<div class="topic-metadata">

**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 11:12pm UTC](https://discuss.elastic.co/t/saved-objects-spaces-slow-kibana-7-3/196419 "2019-08-22T23:12:54Z")

</div>

\-Kibana 7.3 -X-Pack Auth enabled -Multi-tenant environment -Hundreds of Spaces Symptoms - Kibana is fast. However, saving an object (like a search) can take upwards of 45-60 seconds. Creation of a new Space takes a s…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1941)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1943)
