# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1993 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1994 --- ## [Trim all text fields when indexing](https://discuss.elastic.co/t/trim-all-text-fields-when-indexing/191761)
**Author:** [@Ayala](https://discuss.elastic.co/u/Ayala)\ **Replies:** 3\ **Last updated:** [July 30, 2019, 12:28pm UTC](https://discuss.elastic.co/t/trim-all-text-fields-when-indexing/191761 "2019-07-30T12:28:00Z")
Hi, I would like all text fields to be SAVED in elastic without leading and trailing spaces. (That is, in \_source) Pipeline didn't work, but also is not good enough, because I don't want to add each field to it. How … --- ## [Custom query to create data table](https://discuss.elastic.co/t/custom-query-to-create-data-table/192700)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 3\ **Last updated:** [July 30, 2019, 12:02pm UTC](https://discuss.elastic.co/t/custom-query-to-create-data-table/192700 "2019-07-30T12:02:03Z")
Hi I do have the following custom query and want to create a Data Table visualization from it: GET applications\_\*/\_search { "size" : "0", "aggregations": { "by\_size": { "terms": { "field": "Size" … --- ## [BulkProcessor afterBulk method not getting invoked when cluster is Red](https://discuss.elastic.co/t/bulkprocessor-afterbulk-method-not-getting-invoked-when-cluster-is-red/192884)
**Author:** [@PDN10](https://discuss.elastic.co/u/PDN10)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 11:19am UTC](https://discuss.elastic.co/t/bulkprocessor-afterbulk-method-not-getting-invoked-when-cluster-is-red/192884 "2019-07-30T11:19:42Z")
I got into a situation where long running queries on cluster made CPU utilization to go high on all nodes. And cluster went into Red. We have an application which constantly Indexes documents in Elasticsearch using Bulk… --- ## [Comparison of tokens must not be repeated from query side to index document side](https://discuss.elastic.co/t/comparison-of-tokens-must-not-be-repeated-from-query-side-to-index-document-side/192882)
**Author:** [@jyothsna](https://discuss.elastic.co/u/jyothsna)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 11:16am UTC](https://discuss.elastic.co/t/comparison-of-tokens-must-not-be-repeated-from-query-side-to-index-document-side/192882 "2019-07-30T11:16:05Z")
0 for example if i have a name query with name "pier luigi bersani" and index document having name "pi luigi bersani". here we have used bigram filter. the name query has "er" token which is repeated two times.the docum… --- ## [When I'm using prefix query it getting the documents where input string in middle also?](https://discuss.elastic.co/t/when-im-using-prefix-query-it-getting-the-documents-where-input-string-in-middle-also/192877)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 11:04am UTC](https://discuss.elastic.co/t/when-im-using-prefix-query-it-getting-the-documents-where-input-string-in-middle-also/192877 "2019-07-30T11:04:19Z")
I'm using Prefix query and here is the query { "query": { "prefix": { "name": { "value": "asp" } } } } So I'm assuming that I need to get the documents based on the name property startin… --- ## [How to create Elaticsearch index dynamically from spring boot with the help of settings and mappings JSON file?](https://discuss.elastic.co/t/how-to-create-elaticsearch-index-dynamically-from-spring-boot-with-the-help-of-settings-and-mappings-json-file/192870)
**Author:** [@Ramesh\_Kanakarajan](https://discuss.elastic.co/u/Ramesh_Kanakarajan)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 10:47am UTC](https://discuss.elastic.co/t/how-to-create-elaticsearch-index-dynamically-from-spring-boot-with-the-help-of-settings-and-mappings-json-file/192870 "2019-07-30T10:47:11Z")
How to create Elaticsearch index dynamically from spring boot with the help of settings and mappings JSON file? --- ## [HI I trying to search document based on date which is in format 'mm/dd/yyyy'?](https://discuss.elastic.co/t/hi-i-trying-to-search-document-based-on-date-which-is-in-format-mm-dd-yyyy/192829)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 10:39am UTC](https://discuss.elastic.co/t/hi-i-trying-to-search-document-based-on-date-which-is-in-format-mm-dd-yyyy/192829 "2019-07-30T10:39:17Z")
So my query is { "\_source": "dob", "query": { "bool": { "must": \[ { "term": { "dob": "01/01/1965" } } \] } } } I'm getting documents having 11/01/1965, 12/01/1965, 01/01/1965 etc So I need to get only docum… --- ## [Query doesn't show right result](https://discuss.elastic.co/t/query-doesnt-show-right-result/192858)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 2\ **Last updated:** [July 30, 2019, 10:25am UTC](https://discuss.elastic.co/t/query-doesnt-show-right-result/192858 "2019-07-30T10:25:43Z")
Hello everybody ! :v: I sent a log message to elasticsearch and as we can see in kibana it has the following format: So we know that there is the field num1 number and field suffix which has value mt or dn. Despite t… --- ## [User role to just manage the users in Kibana/x-pack security](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510)
**Author:** [@parallelthought](https://discuss.elastic.co/u/parallelthought)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 10:10am UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510 "2019-07-30T10:10:03Z")
I would like to create a user whose role has the privilege to only manage the user list or access User Management in Kibana. Could someone please advice me if there is a particular privilege that i need to choose while … --- ## [List sorted nested objects from multiple documents](https://discuss.elastic.co/t/list-sorted-nested-objects-from-multiple-documents/191986)
**Author:** [@creaticious](https://discuss.elastic.co/u/creaticious)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 10:02am UTC](https://discuss.elastic.co/t/list-sorted-nested-objects-from-multiple-documents/191986 "2019-07-30T10:02:27Z")
Hey guys, i want to know if it is possible to return a list of nested objects, sorted by a nested field but include parent fields...something like an inverted document... Imagine a product list with nested "date"-objec… --- ## [X-pack sql - summation of case statement does not work](https://discuss.elastic.co/t/x-pack-sql-summation-of-case-statement-does-not-work/192727)
**Author:** [@isurika\_lakmali](https://discuss.elastic.co/u/isurika_lakmali)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 9:59am UTC](https://discuss.elastic.co/t/x-pack-sql-summation-of-case-statement-does-not-work/192727 "2019-07-30T09:59:26Z")
Hi Team, I am trying to execute following sql query using x-pack sql. POST /\_sql { "query" : "select sum(case when metric\_name ='requirement' then 1 else 0 end) as req\_count ,sum(case when metric\_name ='defect' then… --- ## [Nodes unable to join cluster](https://discuss.elastic.co/t/nodes-unable-to-join-cluster/192823)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 8\ **Last updated:** [July 30, 2019, 9:59am UTC](https://discuss.elastic.co/t/nodes-unable-to-join-cluster/192823 "2019-07-30T09:59:08Z")
I have following node configurations for 3 node cluster : Each node has two network cards, one for private IP for internode communication and another for public IP to connect from kibana/ external users. The private IP… --- ## [Pulling Data in response to a Query in ELK](https://discuss.elastic.co/t/pulling-data-in-response-to-a-query-in-elk/192863)
**Author:** [@Nik\_Gupta](https://discuss.elastic.co/u/Nik_Gupta)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 9:48am UTC](https://discuss.elastic.co/t/pulling-data-in-response-to-a-query-in-elk/192863 "2019-07-30T09:48:04Z")
Is it possible to operate ELK in way that it pulls data in response to a query and 'drops' it after some period of time? For context, I have an extremely large amount of data in which I'd like to examine specific small s… --- ## [Kibana data table issue](https://discuss.elastic.co/t/kibana-data-table-issue/192009)
**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 9:48am UTC](https://discuss.elastic.co/t/kibana-data-table-issue/192009 "2019-07-30T09:48:38Z")
How to display the text data in kibana data table without using metric like eg: Department|Floor |DRM & ADRMs chambers||First |Commercial Dept.|Ground| |Operating Dept.|Ground| if possible how? if not how should i … --- ## [Logstash-active index fails to create due to duplicate indexes that don't exist](https://discuss.elastic.co/t/logstash-active-index-fails-to-create-due-to-duplicate-indexes-that-dont-exist/192862)
**Author:** [@cdloh](https://discuss.elastic.co/u/cdloh)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 9:44am UTC](https://discuss.elastic.co/t/logstash-active-index-fails-to-create-due-to-duplicate-indexes-that-dont-exist/192862 "2019-07-30T09:44:18Z")
I'm having trouble with logstash outputting to elasticsearch and it creating it's logstash index \[2019-07-30T10:41:54,893\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 500 ({"type"=\>"… --- ## [Problem in terms aggregation result buckets in rollup\_search](https://discuss.elastic.co/t/problem-in-terms-aggregation-result-buckets-in-rollup-search/191651)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 9:41am UTC](https://discuss.elastic.co/t/problem-in-terms-aggregation-result-buckets-in-rollup-search/191651 "2019-07-30T09:41:07Z")
Hello, We have large number of documents on ES and coz of that we have created rollup job. but we are facing a problem while performing terms aggregation. We have one field as city\_name and there are thousands of uniqu… --- ## [Replicas ignoring allocation rules](https://discuss.elastic.co/t/replicas-ignoring-allocation-rules/192639)
**Author:** [@retep007](https://discuss.elastic.co/u/retep007)\ **Replies:** 6\ **Last updated:** [July 30, 2019, 9:37am UTC](https://discuss.elastic.co/t/replicas-ignoring-allocation-rules/192639 "2019-07-30T09:37:49Z")
Hi, I've set-up a small testing cluster with hot-warm architecture. 1 hot, 1 warm node. Hot is also master and ingest node. Warm is only data and coordinator. I have ILM policy which rotates after 24h index from hot to … --- ## [KV Plugin Not working](https://discuss.elastic.co/t/kv-plugin-not-working/192188)
**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\ **Replies:** 8\ **Last updated:** [July 30, 2019, 9:20am UTC](https://discuss.elastic.co/t/kv-plugin-not-working/192188 "2019-07-30T09:20:53Z")
Hi All, I have been trying to extract key value pairs from a certain log message. Log Message Sample a=a1, b=b1, c=c1, d=d1,d2, e=e1 hello world, f=f1 Expected Output a=a1 b=b1 c=c1 d=d1,d2 e=e1 f=f1 Actual Ou… --- ## [Scripted field: Read field data from a document using doc\[‘some\_field’\].value return null in some cases](https://discuss.elastic.co/t/scripted-field-read-field-data-from-a-document-using-doc-some-field-value-return-null-in-some-cases/187385)
**Author:** [@dreamer1](https://discuss.elastic.co/u/dreamer1)\ **Replies:** 6\ **Last updated:** [July 30, 2019, 9:00am UTC](https://discuss.elastic.co/t/scripted-field-read-field-data-from-a-document-using-doc-some-field-value-return-null-in-some-cases/187385 "2019-07-30T09:00:26Z")
hi, on my document I have a field always populated. It's a string field and it can contains data like json or XML. I created this scripted field to find problem. def myField = doc\['myfield'\].value; if (payload != nu… --- ## [Scripted field not working properly in ELK 7.2](https://discuss.elastic.co/t/scripted-field-not-working-properly-in-elk-7-2/188599)
**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 8:57am UTC](https://discuss.elastic.co/t/scripted-field-not-working-properly-in-elk-7-2/188599 "2019-07-30T08:57:52Z")
Hi Anyone can you help me? Below codes were from my ELK Version: 6.3.2 and everything works fine before. But, when I've upgraded this week to 7.2 these code not working as expected. Also, tried this: if (doc\['os.key… --- ## [Difference between Top Hit of Metric Visualization and Top Hit in Metric Visual Builder](https://discuss.elastic.co/t/difference-between-top-hit-of-metric-visualization-and-top-hit-in-metric-visual-builder/192016)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 8:41am UTC](https://discuss.elastic.co/t/difference-between-top-hit-of-metric-visualization-and-top-hit-in-metric-visual-builder/192016 "2019-07-30T08:41:30Z")
Hello All, I have an issue in understanding how exactly Metric in Visual Builder settings work. The easiest way would be to explain it on an example. Here's my data set: { "manufacure\_date": "2019-07-01T08:00:00.00… --- ## [Empty DNS Fields and Tables in Network View](https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285)
**Author:** [@pepperhat](https://discuss.elastic.co/u/pepperhat)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 8:21am UTC](https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285 "2019-07-30T08:21:02Z")
I have working with the new SIEM module in 7.2 and have been consuming Suricata data with the filebeat module. When reviewing the data in the SIEM view, some fields and tables are empty, where I would expect data to show… --- ## [What is the timestamp retuned in the @timestamp filed of csv report generated from Kibana](https://discuss.elastic.co/t/what-is-the-timestamp-retuned-in-the-timestamp-filed-of-csv-report-generated-from-kibana/192264)
**Author:** [@ggeorge](https://discuss.elastic.co/u/ggeorge)\ **Replies:** 2\ **Last updated:** [July 30, 2019, 7:38am UTC](https://discuss.elastic.co/t/what-is-the-timestamp-retuned-in-the-timestamp-filed-of-csv-report-generated-from-kibana/192264 "2019-07-30T07:38:49Z")
The timestamp in the @timestamp field in the csv report is looking very different than the actual timestamp. Please find below a screenshot of the same. On the right hand side is the timestamp in the csv report and at th… --- ## [Disabling DELETE API](https://discuss.elastic.co/t/disabling-delete-api/192830)
**Author:** [@tonyl](https://discuss.elastic.co/u/tonyl)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 6:52am UTC](https://discuss.elastic.co/t/disabling-delete-api/192830 "2019-07-30T06:52:31Z")
Read from the below linked post from 2014 that the DELETE method cannot be disabled in Elastic Search. Like to confirm if this is still so currently? If so, is there any official documentation which states this in wr… --- ## [Can't restart two-master cluster](https://discuss.elastic.co/t/cant-restart-two-master-cluster/192675)
**Author:** [@Jordan\_Ex](https://discuss.elastic.co/u/Jordan_Ex)\ **Replies:** 7\ **Last updated:** [July 30, 2019, 6:27am UTC](https://discuss.elastic.co/t/cant-restart-two-master-cluster/192675 "2019-07-30T06:27:03Z")
Hi, I need a little bit of help here. I have a two master-eligible nodes cluster (yeah, now I know) and did the following: stopped elasticsearch on both nodes moved a copy from an unimportant index to a backup delete… --- ## [When Sort use \_ignoring\_unmapped\_fields how search\_after do?](https://discuss.elastic.co/t/when-sort-use-ignoring-unmapped-fields-how-search-after-do/192828)
**Author:** [@luyuncheng](https://discuss.elastic.co/u/luyuncheng)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 6:16am UTC](https://discuss.elastic.co/t/when-sort-use-ignoring-unmapped-fields-how-search-after-do/192828 "2019-07-30T06:16:36Z")
In ES version6.3.2 I am confusing is it a bug or a feature as following descriptions: when use sort \_ignoring\_unmapped\_fields, why there is ambiguous response in unmapped\_type WHEN USE type:float/double PUT test\_in… --- ## [Storage Shared or local](https://discuss.elastic.co/t/storage-shared-or-local/192604)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 3\ **Last updated:** [July 30, 2019, 6:01am UTC](https://discuss.elastic.co/t/storage-shared-or-local/192604 "2019-07-30T06:01:42Z")
I am planning to setup a 3 node ES cluster with all 3 nodes have their local disk storage for data and NFS storage for ES install in following fashion of storage in given filesystem names Node\[1,2,3\] : /NFS/install Nod… --- ## [Reporting tool](https://discuss.elastic.co/t/reporting-tool/192715)
**Author:** [@psdk](https://discuss.elastic.co/u/psdk)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 5:51am UTC](https://discuss.elastic.co/t/reporting-tool/192715 "2019-07-30T05:51:23Z")
Hi Guys, I need your technical suggestion / idea about our case: We have a contact center software and usually with customers that have about 50K calls each day. As you know reporting and especially online reporting is… --- ## [How can i get exact the number of item in array?](https://discuss.elastic.co/t/how-can-i-get-exact-the-number-of-item-in-array/192520)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 2\ **Last updated:** [July 30, 2019, 5:08am UTC](https://discuss.elastic.co/t/how-can-i-get-exact-the-number-of-item-in-array/192520 "2019-07-30T05:08:37Z")
How can i count exact the number of item in array object? I have data like below. doc1 people : \[ {email:a@virtual.com}, {email:b@virtual.com}, {email:c@another.com} \] doc2 people : \[ {email:d@virtual.com}, … --- ## [Uniform Time Formats](https://discuss.elastic.co/t/uniform-time-formats/192678)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 5\ **Last updated:** [July 30, 2019, 4:56am UTC](https://discuss.elastic.co/t/uniform-time-formats/192678 "2019-07-30T04:56:33Z")
I have the following 2 fields with different formats in the input. End Time: 2019-07-26 00:00:05,580 Start Time: 2019-07-26T00:00:02.678+02:100: I want them to be formatted to a uniform timestamp say YYYY-MM-dd HH:mm:… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1992) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1994)