# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1965 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1966 --- ## [Best way to store multi value to specific field](https://discuss.elastic.co/t/best-way-to-store-multi-value-to-specific-field/194692)
**Author:** [@elasticpatrick](https://discuss.elastic.co/u/elasticpatrick)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 1:15pm UTC](https://discuss.elastic.co/t/best-way-to-store-multi-value-to-specific-field/194692 "2019-08-12T13:15:37Z")
Hello, I have e-commerce store where I have generated automated tags for the my products. Each product can have approximately 100-120 tags on it. Now I would like to do match query and retrieve only specific tags from th… --- ## [Kafka output plugin is not picking up value from @metadata field](https://discuss.elastic.co/t/kafka-output-plugin-is-not-picking-up-value-from-metadata-field/194825)
**Author:** [@amrutadale](https://discuss.elastic.co/u/amrutadale)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 12:37pm UTC](https://discuss.elastic.co/t/kafka-output-plugin-is-not-picking-up-value-from-metadata-field/194825 "2019-08-12T12:37:07Z")
Hello Team, I have http endpoint as input. Based on the value received in header tag for application , I need to generate the jass configuration at run time for kafka output topic. input { http { host =\> "127.0.0.1" … --- ## [Parsing Json object array](https://discuss.elastic.co/t/parsing-json-object-array/190954)
**Author:** [@Shawcs](https://discuss.elastic.co/u/Shawcs)\ **Replies:** 9\ **Last updated:** [August 12, 2019, 12:31pm UTC](https://discuss.elastic.co/t/parsing-json-object-array/190954 "2019-08-12T12:31:01Z")
Hi, I have trouble with a dynamic Json file. My json have an array of "circuitPath". This circuit path is a nested array inside my main json file that can be N element long. I would like to parse it dynamicaly like s… --- ## [Multiple Filter Problem after upgrading to Kibana 7.3](https://discuss.elastic.co/t/multiple-filter-problem-after-upgrading-to-kibana-7-3/194264)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 12:27pm UTC](https://discuss.elastic.co/t/multiple-filter-problem-after-upgrading-to-kibana-7-3/194264 "2019-08-12T12:27:47Z")
Hi, I have recently updated to version 7.3 and I'm experiencing problems when using multiples filters in dashboards, visualizations and searches. When combining more than two filters (as shown in picture) it suddenly st… --- ## [Percolate performance improvements?](https://discuss.elastic.co/t/percolate-performance-improvements/194717)
**Author:** [@Jeff\_Bolle](https://discuss.elastic.co/u/Jeff_Bolle)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 12:19pm UTC](https://discuss.elastic.co/t/percolate-performance-improvements/194717 "2019-08-12T12:19:58Z")
We have been experiencing what feels like rather poor performance for our percolate queries. We have 4 indexes with percolate queries, each with a few hundred saved queries. These indexes have a single shard and many rep… --- ## [Visualizations and Dashboard Configured in kibana 6.6.1 is not available in kibana 7.0.1 after upgrading ELK Stack from 6.6.1 to 7.0.1](https://discuss.elastic.co/t/visualizations-and-dashboard-configured-in-kibana-6-6-1-is-not-available-in-kibana-7-0-1-after-upgrading-elk-stack-from-6-6-1-to-7-0-1/188907)
**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 12:18pm UTC](https://discuss.elastic.co/t/visualizations-and-dashboard-configured-in-kibana-6-6-1-is-not-available-in-kibana-7-0-1-after-upgrading-elk-stack-from-6-6-1-to-7-0-1/188907 "2019-08-12T12:18:58Z")
Hi I have deployed Elk stack of 6.6.1 and everything is fine like cluster health and there are no unassigned Shards. Also we have configured visualizations and Dashboards in kibana. Now i am trying to upgrade Elk s… --- ## [Best practice to create index with common and specific sets of properties per document](https://discuss.elastic.co/t/best-practice-to-create-index-with-common-and-specific-sets-of-properties-per-document/194836)
**Author:** [@ashvydkyi](https://discuss.elastic.co/u/ashvydkyi)\ **Replies:** 0\ **Last updated:** [August 12, 2019, 12:01pm UTC](https://discuss.elastic.co/t/best-practice-to-create-index-with-common-and-specific-sets-of-properties-per-document/194836 "2019-08-12T12:01:44Z")
Hey guys, can you share the best practices how to create an index to achieve the following structure: each document has a common set of properties (type, priority, status) each document has a specific set of properties… --- ## [How to change a number](https://discuss.elastic.co/t/how-to-change-a-number/194832)
**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 11:37am UTC](https://discuss.elastic.co/t/how-to-change-a-number/194832 "2019-08-12T11:37:49Z")
hi, I'm using grok to pull out the user\_id field grok { match =\> { "authDN" =\> "uid=%{GREEDYDATA:user\_id}," } } My field user\_id=0212345678 I always need to delete the first 0 and insert 421. HOW? 0212345678 -\> 42121… --- ## [Logstash doesn't load all files in the folder](https://discuss.elastic.co/t/logstash-doesnt-load-all-files-in-the-folder/194821)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 0\ **Last updated:** [August 12, 2019, 9:42am UTC](https://discuss.elastic.co/t/logstash-doesnt-load-all-files-in-the-folder/194821 "2019-08-12T09:42:37Z")
Hi, I'm using Logstash 6.8.1 with mode =\> "read". Logstash doesn't load all the files that respect the path and the regex specified in input and the unread files don't appear in the file specified in file\_completed\_log… --- ## [How To delete snapshots older than 20 days](https://discuss.elastic.co/t/how-to-delete-snapshots-older-than-20-days/194801)
**Author:** [@Pottendla\_Nagma](https://discuss.elastic.co/u/Pottendla_Nagma)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-to-delete-snapshots-older-than-20-days/194801 "2019-08-12T09:40:46Z")
Hi, I am looking for any API for deleting the snapshots older than 20 days. Right now DELETE api doing deletion only for particular snapshot given with the name. Please help me. Thank you. Regards, Nagma P. --- ## [Query based on array items satisfiying certain criteria](https://discuss.elastic.co/t/query-based-on-array-items-satisfiying-certain-criteria/194599)
**Author:** [@sai.khaled](https://discuss.elastic.co/u/sai.khaled)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 9:34am UTC](https://discuss.elastic.co/t/query-based-on-array-items-satisfiying-certain-criteria/194599 "2019-08-12T09:34:26Z")
i have the following mapping "mappings": { "contact": { "dynamic": "false", "\_all": { "enabled": false }, "properties": { "civility": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_abo… --- ## [Elasticsearch 7.2.0. homebrew install on mac java error on startup fail](https://discuss.elastic.co/t/elasticsearch-7-2-0-homebrew-install-on-mac-java-error-on-startup-fail/192760)
**Author:** [@ferenc0521](https://discuss.elastic.co/u/ferenc0521)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-homebrew-install-on-mac-java-error-on-startup-fail/192760 "2019-08-12T08:59:41Z")
$ elasticsearch Exception in thread "main" java.lang.RuntimeException: starting java failed with \[1\] output: \[0.002s\]\[error\]\[logging\] Error opening log file 'logs/gc.log': No such file or directory \[0.002s\]\[error\]\[… --- ## [Kibana doesn't recognize keyword fields](https://discuss.elastic.co/t/kibana-doesnt-recognize-keyword-fields/194586)
**Author:** [@JulGor](https://discuss.elastic.co/u/JulGor)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-doesnt-recognize-keyword-fields/194586 "2019-08-12T08:55:38Z")
Hi, I realized that Kibana is not recognizing some fields that are mapped as "text" with a second field "keyword". This is the mapping of my index: And this is the select menu when I'm trying to use them in a "Term"… --- ## [Entity centric indexing](https://discuss.elastic.co/t/entity-centric-indexing/194814)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 0\ **Last updated:** [August 12, 2019, 8:44am UTC](https://discuss.elastic.co/t/entity-centric-indexing/194814 "2019-08-12T08:44:27Z")
Hello, I'm looking for any further information about entity centric indexing approach. I read some topics here on forum and watched a video from talk with Mark Harwood but still have many questions and don't exactly kno… --- ## [Using search\_after for pagination where you sort by score](https://discuss.elastic.co/t/using-search-after-for-pagination-where-you-sort-by-score/146233)
**Author:** [@i333](https://discuss.elastic.co/u/i333)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 8:28am UTC](https://discuss.elastic.co/t/using-search-after-for-pagination-where-you-sort-by-score/146233 "2019-08-12T08:28:17Z")
In my query I sort by score, so the most relevant results are first. I'd like to be able to paginate this, and search\_after is apparently the best way for my use case. But search\_after doesn't seem to let you use \_score … --- ## [Permissions of logstash\_write user](https://discuss.elastic.co/t/permissions-of-logstash-write-user/194812)
**Author:** [@jimmyvalmer19](https://discuss.elastic.co/u/jimmyvalmer19)\ **Replies:** 0\ **Last updated:** [August 12, 2019, 8:21am UTC](https://discuss.elastic.co/t/permissions-of-logstash-write-user/194812 "2019-08-12T08:21:22Z")
Hello. I have user called logstash and role called logstash\_write. User logstash has a role logstash\_write and the role is configured as follows: Cluster privileges: all Indices privileges: all (for all indices i crea… --- ## [Term query on nested field returns empty result, why?](https://discuss.elastic.co/t/term-query-on-nested-field-returns-empty-result-why/194642)
**Author:** [@andreas-gruenwald](https://discuss.elastic.co/u/andreas-gruenwald)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 8:13am UTC](https://discuss.elastic.co/t/term-query-on-nested-field-returns-empty-result-why/194642 "2019-08-12T08:13:32Z")
GET /at\_de\_elastic/\_search { "\_source": \[ "attributes.articleName", "attributes.remoteId", "attributes.comparisonListMetadataSearch" \], "query": { "term": { "attributes.remoteId": … --- ## [Can we create snapshots of immutable indices?](https://discuss.elastic.co/t/can-we-create-snapshots-of-immutable-indices/194687)
**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 8:05am UTC](https://discuss.elastic.co/t/can-we-create-snapshots-of-immutable-indices/194687 "2019-08-12T08:05:42Z")
Suppose I have made an index to be immutable . Is it possible to make a snapshot of it?. Also if no, what is the best practices when dealing with the backing up and restoration operations of immutable indices ? --- ## [How many months of log data do we retain in Elasticsearch?](https://discuss.elastic.co/t/how-many-months-of-log-data-do-we-retain-in-elasticsearch/194104)
**Author:** [@Bjen\_Shah](https://discuss.elastic.co/u/Bjen_Shah)\ **Replies:** 6\ **Last updated:** [August 12, 2019, 8:01am UTC](https://discuss.elastic.co/t/how-many-months-of-log-data-do-we-retain-in-elasticsearch/194104 "2019-08-12T08:01:44Z")
How many months of log data does organization should store in Elasticsearch? Do we store the log data anywhere aside from Elasticsearch (e.g. flat files?) How do we archive old log data that is required for regulatory c… --- ## [After upgrading to 7.3.0 search queries return null\_pointer\_exception](https://discuss.elastic.co/t/after-upgrading-to-7-3-0-search-queries-return-null-pointer-exception/193629)
**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\ **Replies:** 3\ **Last updated:** [August 12, 2019, 7:56am UTC](https://discuss.elastic.co/t/after-upgrading-to-7-3-0-search-queries-return-null-pointer-exception/193629 "2019-08-12T07:56:30Z")
Search queries (which worked before upgrading) now return { "took":16, "timed\_out":false, "\_shards":{ "total":5, "successful":4, "skipped":0, "failed":1, "failures":\[ { … --- ## [How to check if a field value of a tag is present in the field value of other tags](https://discuss.elastic.co/t/how-to-check-if-a-field-value-of-a-tag-is-present-in-the-field-value-of-other-tags/194393)
**Author:** [@madhan8](https://discuss.elastic.co/u/madhan8)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 7:51am UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-value-of-a-tag-is-present-in-the-field-value-of-other-tags/194393 "2019-08-12T07:51:47Z")
Hi, I want to identify if an IP address(field A) is present in the list of IP addresses(field B). How will I be able to do this check? How should I convert the IP addresses present in a field B into a list first? Onc… --- ## [How to limit the list of fields that can be written to a specific index?](https://discuss.elastic.co/t/how-to-limit-the-list-of-fields-that-can-be-written-to-a-specific-index/194401)
**Author:** [@Melok](https://discuss.elastic.co/u/Melok)\ **Replies:** 6\ **Last updated:** [August 12, 2019, 7:46am UTC](https://discuss.elastic.co/t/how-to-limit-the-list-of-fields-that-can-be-written-to-a-specific-index/194401 "2019-08-12T07:46:52Z")
I want my document index to contain only fields ('a', 'b', 'c' for example). How can I do this? --- ## [Kibana Code Application SSH Login with git protocol](https://discuss.elastic.co/t/kibana-code-application-ssh-login-with-git-protocol/194658)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 7:27am UTC](https://discuss.elastic.co/t/kibana-code-application-ssh-login-with-git-protocol/194658 "2019-08-12T07:27:05Z")
Hello, What's the trick to get the Kibana Code Application (7.2.1) working with private GitLab repositories? The documentation is rather sparse. Relevant Kibana configuration: xpack.code.ui.enabled: true xpack.code.se… --- ## [Master node fail when unexpected error while indexing document](https://discuss.elastic.co/t/master-node-fail-when-unexpected-error-while-indexing-document/194788)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 5\ **Last updated:** [August 12, 2019, 7:25am UTC](https://discuss.elastic.co/t/master-node-fail-when-unexpected-error-while-indexing-document/194788 "2019-08-12T07:25:45Z")
Elasticsearch version: 7.0.1 Master nodes: 3 Datanodes: 31 When one of my index fail to initiate primary shard (in my case its the .monitoring-es-7-2019.08.12 index). The leader master will fail in some minutes. The … --- ## [Visualization should contain search bar where any search criteria should be entered](https://discuss.elastic.co/t/visualization-should-contain-search-bar-where-any-search-criteria-should-be-entered/194795)
**Author:** [@swathi\_elastic](https://discuss.elastic.co/u/swathi_elastic)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 7:20am UTC](https://discuss.elastic.co/t/visualization-should-contain-search-bar-where-any-search-criteria-should-be-entered/194795 "2019-08-12T07:20:21Z")
Visualization should contain search bar where any search criteria should be entered in Kibana --- ## [Dots in index and searching](https://discuss.elastic.co/t/dots-in-index-and-searching/194737)
**Author:** [@codecandy](https://discuss.elastic.co/u/codecandy)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 7:03am UTC](https://discuss.elastic.co/t/dots-in-index-and-searching/194737 "2019-08-12T07:03:44Z")
Hi, I am pretty new to ES: I have to create an index which is dot seperated something like, // minions.dev.contents/minion02.retro/noise:2019-08-01T19:42:45.000Z and the contents is // { "noise" : "25", "temperatu… --- ## [Action \[indices:data/read/search\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-data-read-search-is-unauthorized-for-user/194789)
**Author:** [@jhonko](https://discuss.elastic.co/u/jhonko)\ **Replies:** 0\ **Last updated:** [August 12, 2019, 5:49am UTC](https://discuss.elastic.co/t/action-indices-data-read-search-is-unauthorized-for-user/194789 "2019-08-12T05:49:50Z")
Hello! I'm currently evaluating Elastic Stack and I have problems related to REST API authorization. I'm not sure if I'm doing something wrong or if there's a bug is Elasticsearch. I have setup OIDC SSO successfully (u… --- ## [Terminology Clarification](https://discuss.elastic.co/t/terminology-clarification/194758)
**Author:** [@stanly](https://discuss.elastic.co/u/stanly)\ **Replies:** 1\ **Last updated:** [August 12, 2019, 5:24am UTC](https://discuss.elastic.co/t/terminology-clarification/194758 "2019-08-12T05:24:22Z")
I was reading this ticket, and it seems like a really exciting change: https://github.com/apache/lucene-solr/pull/715 One constraint mentioned here: The segments must have at most one field value per document (otherwi… --- ## [It takes up to 10 minutes to join new master](https://discuss.elastic.co/t/it-takes-up-to-10-minutes-to-join-new-master/194522)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 5:08am UTC](https://discuss.elastic.co/t/it-takes-up-to-10-minutes-to-join-new-master/194522 "2019-08-12T05:08:47Z")
When the leader master node fail, it takes about a minute to elect a new leader. But the follower master node takes minutes to switch to the new leader. It's this expected? or any configuration can optimize this? After … --- ## [Failed to flush outgoing items, exception WebHDFS::IOError](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-exception-webhdfs-ioerror/194777)
**Author:** [@pro\_sy](https://discuss.elastic.co/u/pro_sy)\ **Replies:** 0\ **Last updated:** [August 12, 2019, 3:06am UTC](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-exception-webhdfs-ioerror/194777 "2019-08-12T03:06:50Z")
I've been trying to send my logs from server by beat and to hdfs server in compressed format. And this gave me some warnings and logs seems not to be sent over to hdfs unlike it used to when I didn't use compress options… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1964) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1966)