# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=620 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 621 --- ## [Can not get run Elasticsearch 6 on my MAC](https://discuss.elastic.co/t/can-not-get-run-elasticsearch-6-on-my-mac/301707)
**Author:** [@Sajjad\_Murtaza](https://discuss.elastic.co/u/Sajjad_Murtaza)\ **Replies:** 16\ **Last updated:** [June 1, 2022, 3:50pm UTC](https://discuss.elastic.co/t/can-not-get-run-elasticsearch-6-on-my-mac/301707 "2022-06-01T15:50:55Z")
Hi all, I can not get run Elasticsearch 6 on my MAC ➜ ~ brew services list Name Status User File dbus none … --- ## [ElasticSearch pagination - from/size vs Search After for number of hits less than 10k](https://discuss.elastic.co/t/elasticsearch-pagination-from-size-vs-search-after-for-number-of-hits-less-than-10k/305855)
**Author:** [@ano](https://discuss.elastic.co/u/ano)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-pagination-from-size-vs-search-after-for-number-of-hits-less-than-10k/305855 "2022-06-01T15:16:52Z")
Hi, I'm using Elasticsearch, and for paginating the search results, should I use the simple from/size, or should I go with search after. I've read that if the number of hits is less than 10k, then from/size is acceptabl… --- ## [What does that \* in my node means?](https://discuss.elastic.co/t/what-does-that-in-my-node-means/306125)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 1:48pm UTC](https://discuss.elastic.co/t/what-does-that-in-my-node-means/306125 "2022-06-01T13:48:55Z")
I've been trying out working with more than one node and once checked them in DevTools I found this \* in one of my nodes. It's a silly thing but I want to avoid any misconception, so what does it mean? --- ## [Subselect filter for aggragation](https://discuss.elastic.co/t/subselect-filter-for-aggragation/306054)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 1:24pm UTC](https://discuss.elastic.co/t/subselect-filter-for-aggragation/306054 "2022-06-01T13:24:42Z")
Hi, I have been searching for a way to solve the following problem by performing a query or aggregation instead of looping through the data and filtering the results myself. I haven't found a solution up until now and w… --- ## [Generic filter for Messages containing JSON](https://discuss.elastic.co/t/generic-filter-for-messages-containing-json/304810)
**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 12:56pm UTC](https://discuss.elastic.co/t/generic-filter-for-messages-containing-json/304810 "2022-06-01T12:56:33Z")
Hi, I have the following initial situation, we get various log messages which have JSON content, they look like this, for example: message:Log Text case1 #json: {"case1-total":26,"case-valid":8,"case-duplicates":16,"c… --- ## [Kibana couldn't find verification code](https://discuss.elastic.co/t/kibana-couldnt-find-verification-code/305371)
**Author:** [@Nikos\_Kostis](https://discuss.elastic.co/u/Nikos_Kostis)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 12:44pm UTC](https://discuss.elastic.co/t/kibana-couldnt-find-verification-code/305371 "2022-06-01T12:44:36Z")
Trying to initially connect kibana 8.2.0 to elastic manually i get promted to enter the kibana verification code that i can get from the kibana pod, (i am trying to run elk stack in aks cluster). So i exec into the kib… --- ## [Logstash empty range in char class error](https://discuss.elastic.co/t/logstash-empty-range-in-char-class-error/306103)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 9:47am UTC](https://discuss.elastic.co/t/logstash-empty-range-in-char-class-error/306103 "2022-06-01T09:47:18Z")
Hello, I'm new to Elasticsearch I'm working with log files comming from filebeat and Filebeat and I'm trying to add a field "response\_time", and then affect the difference between timestamp to It. So I create a logsta… --- ## [Java for Elasticsearch version](https://discuss.elastic.co/t/java-for-elasticsearch-version/306094)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 12:04pm UTC](https://discuss.elastic.co/t/java-for-elasticsearch-version/306094 "2022-06-01T12:04:52Z")
Hai. I have a question here. Before this im using Elasticsearch version 7.3.1 with java 11. Now after I upgraded Elasticsearch to version 7.17.1, i accidentally upgrade the java also which java 17. Is there any impact o… --- ## [Elasticsearch query to capture '#' character](https://discuss.elastic.co/t/elasticsearch-query-to-capture-character/305906)
**Author:** [@andresf](https://discuss.elastic.co/u/andresf)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-capture-character/305906 "2022-06-01T11:58:44Z")
Hi, I want to create alert based on Elasticsearch query result and we have log message that contain "Error #-" from specific hostname. { "query": { "bool": { "must": \[ { "match": {"message": "Error … --- ## [Aggregation over collapsed field inner\_hits?](https://discuss.elastic.co/t/aggregation-over-collapsed-field-inner-hits/305980)
**Author:** [@Evelyn\_Gillie](https://discuss.elastic.co/u/Evelyn_Gillie)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 11:24am UTC](https://discuss.elastic.co/t/aggregation-over-collapsed-field-inner-hits/305980 "2022-06-01T11:24:44Z")
Listing: item\_id seller\_id price I want to group together all listings for the same item, and show the average price across all sellers. I'm using field collapsing on item\_id, but is there a way to to compute the… --- ## [Best way to retrieve multiple fields for a set of field values](https://discuss.elastic.co/t/best-way-to-retrieve-multiple-fields-for-a-set-of-field-values/304954)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 7\ **Last updated:** [June 1, 2022, 11:15am UTC](https://discuss.elastic.co/t/best-way-to-retrieve-multiple-fields-for-a-set-of-field-values/304954 "2022-06-01T11:15:29Z")
Hello, I need to get from Elasticsearch specific fields for some number of hosts. This is my current approach where I prefer the list of "host.hostname" fields and "size" based on the size of list. """ { … --- ## [UnknownHostException while connecting to Elasticsearch](https://discuss.elastic.co/t/unknownhostexception-while-connecting-to-elasticsearch/305770)
**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\ **Replies:** 9\ **Last updated:** [June 1, 2022, 11:04am UTC](https://discuss.elastic.co/t/unknownhostexception-while-connecting-to-elasticsearch/305770 "2022-06-01T11:04:52Z")
Hi, while doing my first steps with the tutorial i face much problems even executing the first lines of code. I get an java.net.UnknownHostException that says "Der angegebene Host ist unbekannt (https://xxx.yyyzzz.co… --- ## [The es-cluster warm-node rebalance tasks keeps going and some node shards decrease for long time](https://discuss.elastic.co/t/the-es-cluster-warm-node-rebalance-tasks-keeps-going-and-some-node-shards-decrease-for-long-time/306074)
**Author:** [@yitiao\_feiyu](https://discuss.elastic.co/u/yitiao_feiyu)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 10:28am UTC](https://discuss.elastic.co/t/the-es-cluster-warm-node-rebalance-tasks-keeps-going-and-some-node-shards-decrease-for-long-time/306074 "2022-06-01T10:28:20Z")
version ：7.17 The es-cluster warm-node rebalance tasks keeps going and not stop, warm node 's index comes from hot-node by ILM policy control, I didn't update warm index directly. I hava snapshot task, but I think it'… --- ## [How i can show percentage on gauge chart](https://discuss.elastic.co/t/how-i-can-show-percentage-on-gauge-chart/306090)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 8\ **Last updated:** [June 1, 2022, 10:27am UTC](https://discuss.elastic.co/t/how-i-can-show-percentage-on-gauge-chart/306090 "2022-06-01T10:27:46Z")
I have a column in data which contain 1000 row and values are 0 and 1 , how i can calculate percentage and show on gauge. for example 750 rows have 1 than percentage is 75 --- ## [How to force a forcemerge?](https://discuss.elastic.co/t/how-to-force-a-forcemerge/305090)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 7\ **Last updated:** [June 1, 2022, 8:35am UTC](https://discuss.elastic.co/t/how-to-force-a-forcemerge/305090 "2022-06-01T08:35:42Z")
How do I force a forcemerge to run for shards with only one segment? I changed index.codec on my index to BEST\_COMPRESSION and I want my segments use it. But when I run forcemerge, it immediately returns. Guessing beca… --- ## [\[analysis\] Kuromoji: can't analaze text with Half-width space in user dictionary](https://discuss.elastic.co/t/analysis-kuromoji-cant-analaze-text-with-half-width-space-in-user-dictionary/306097)
**Author:** [@cross1154](https://discuss.elastic.co/u/cross1154)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 9:19am UTC](https://discuss.elastic.co/t/analysis-kuromoji-cant-analaze-text-with-half-width-space-in-user-dictionary/306097 "2022-06-01T09:19:53Z")
I try to use kuromoji user dictionary to make Elasticsearch can analazed japanese name which with Half-width space between family name & first name. Settings example looks like the below: { "settings": { "analys… --- ## [Compare data from different time ranges and calculate change](https://discuss.elastic.co/t/compare-data-from-different-time-ranges-and-calculate-change/305949)
**Author:** [@Rhinos](https://discuss.elastic.co/u/Rhinos)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 9:00am UTC](https://discuss.elastic.co/t/compare-data-from-different-time-ranges-and-calculate-change/305949 "2022-06-01T09:00:16Z")
Hello, I am rather new to using Kibana, so please don't mind if I misuse terminology. In the end my issue is about presenting AWS Security Hub data, the findings end up in Elasticsearch / Kibana where we want to proces… --- ## [How to add compound conditions in search template?](https://discuss.elastic.co/t/how-to-add-compound-conditions-in-search-template/305898)
**Author:** [@omkarrane](https://discuss.elastic.co/u/omkarrane)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 8:58am UTC](https://discuss.elastic.co/t/how-to-add-compound-conditions-in-search-template/305898 "2022-06-01T08:58:49Z")
Use Case: We have 2 conditions Query parameter matches All of dishFamilyId, dishTypeId, dishPreparationStyleId should match (they might not be present as well) Eg. Its possible that dishTypeId and dishPreparationStyle… --- ## [Absolute values in TSVB](https://discuss.elastic.co/t/absolute-values-in-tsvb/306004)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 8:57am UTC](https://discuss.elastic.co/t/absolute-values-in-tsvb/306004 "2022-06-01T08:57:49Z")
How do we show absolute values of a field in TSVB? --- ## [If condition in Kibana Table Visualization](https://discuss.elastic.co/t/if-condition-in-kibana-table-visualization/305751)
**Author:** [@micaelle](https://discuss.elastic.co/u/micaelle)\ **Replies:** 5\ **Last updated:** [June 1, 2022, 8:34am UTC](https://discuss.elastic.co/t/if-condition-in-kibana-table-visualization/305751 "2022-06-01T08:34:24Z")
Hi, is it possible to use if condition in a Kibana Table Visualization? I want to build a financial table that counts a line item and then multiply the quantity with a specific value for each volume level. --- ## [Arranging x axis by value of y axis for a formula field](https://discuss.elastic.co/t/arranging-x-axis-by-value-of-y-axis-for-a-formula-field/305973)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 8:20am UTC](https://discuss.elastic.co/t/arranging-x-axis-by-value-of-y-axis-for-a-formula-field/305973 "2022-06-01T08:20:28Z")
I'm creating a tree map lens visualization. I have a field "account name" under "group by" and have a formula (absolute value) on a number field "Delta value" under "size by". When I try to rearrange the order of the "gr… --- ## [Group by function in Discover](https://discuss.elastic.co/t/group-by-function-in-discover/305922)
**Author:** [@temp\_account](https://discuss.elastic.co/u/temp_account)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 8:10am UTC](https://discuss.elastic.co/t/group-by-function-in-discover/305922 "2022-06-01T08:10:28Z")
i used a lot of Kibana/Discover in work. As you know, in the query result of Discover, in each log record, there may be many fields included, eg. userid, flowid, userip, username, userAction, etc. Several log record ma… --- ## [Is there a way to find out on logstash pipeline status?](https://discuss.elastic.co/t/is-there-a-way-to-find-out-on-logstash-pipeline-status/306066)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 8:00am UTC](https://discuss.elastic.co/t/is-there-a-way-to-find-out-on-logstash-pipeline-status/306066 "2022-06-01T08:00:23Z")
I've a logstash pipeline which extracts the data from the Elasticsearch and outputs to a file. Is there a way to check if the pipeline is successfully completed by writing to the output file? Right now, I keep checking t… --- ## [Logstash Configuration file in 8.2](https://discuss.elastic.co/t/logstash-configuration-file-in-8-2/306019)
**Author:** [@KunwarAkanksha](https://discuss.elastic.co/u/KunwarAkanksha)\ **Replies:** 3\ **Last updated:** [June 1, 2022, 7:58am UTC](https://discuss.elastic.co/t/logstash-configuration-file-in-8-2/306019 "2022-06-01T07:58:04Z")
After upgrading the ELK stack to 8.2 my logstash configuration file where i have defined the filters for logstash-filter-geoip have changed some key names , like victimASN.as\_org is now coming as victimASN.as.organizatio… --- ## [Kibana 8.x Installation without GUI](https://discuss.elastic.co/t/kibana-8-x-installation-without-gui/305405)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 3\ **Last updated:** [June 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/kibana-8-x-installation-without-gui/305405 "2022-06-01T07:26:35Z")
Hi there, I want to install Kibana 8.x - actually I already did it. But: There are these new steps when building a new cluster from scratch: /usr/share/Elasticsearch/bin/Elasticsearch-create-enrollment-token -s kibana … --- ## [Requirements production cluster](https://discuss.elastic.co/t/requirements-production-cluster/306029)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 7:18am UTC](https://discuss.elastic.co/t/requirements-production-cluster/306029 "2022-06-01T07:18:55Z")
Hello everyone, I would like to implement the elk stack for log management for a SIEM. In a production context I would like to create a cluster of 3 elastic nodes. What are your advices and best practices? 2 x node.r… --- ## [Could use elasticsearch to do keyword extraction](https://discuss.elastic.co/t/could-use-elasticsearch-to-do-keyword-extraction/306083)
**Author:** [@zhugw](https://discuss.elastic.co/u/zhugw)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 6:49am UTC](https://discuss.elastic.co/t/could-use-elasticsearch-to-do-keyword-extraction/306083 "2022-06-01T06:49:08Z")
Want to extract some keyword from texts , could use tf-idf or textrank algorithm to implement it , e.g. scikit-learn tf-idf Could use Elasticsearch to implement this purpose(keyword extraction), that is put text into in… --- ## [Data type is showing as text value in data view rather than decimal when uploaded using mysql config file by logstash](https://discuss.elastic.co/t/data-type-is-showing-as-text-value-in-data-view-rather-than-decimal-when-uploaded-using-mysql-config-file-by-logstash/306078)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 6:22am UTC](https://discuss.elastic.co/t/data-type-is-showing-as-text-value-in-data-view-rather-than-decimal-when-uploaded-using-mysql-config-file-by-logstash/306078 "2022-06-01T06:22:16Z")
Hi i create a sql connection using logstash and upload a data but my data is showing as text as shown in figure. --- ## [The cluster cannot discover the master or other nodes](https://discuss.elastic.co/t/the-cluster-cannot-discover-the-master-or-other-nodes/305997)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 6:00am UTC](https://discuss.elastic.co/t/the-cluster-cannot-discover-the-master-or-other-nodes/305997 "2022-06-01T06:00:32Z")
According to the prompt "this node must discover master-eligible nodes \[es-node01, es-node02, es-node03\]", es-node03 does not find other nodes. According to the results I searched, cluster.initial\_master\_nodes needs to b… --- ## [Moving kibana visualisation to a new cluster with differently named indexes](https://discuss.elastic.co/t/moving-kibana-visualisation-to-a-new-cluster-with-differently-named-indexes/305114)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 3\ **Last updated:** [June 1, 2022, 3:35am UTC](https://discuss.elastic.co/t/moving-kibana-visualisation-to-a-new-cluster-with-differently-named-indexes/305114 "2022-06-01T03:35:35Z")
I have just upgraded to 17.7.1 and I now find that I can no longer change the index pattern associated with a visualisation by exporting it, deleting the the index temporarily and importing it back it. It used to detec… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=619) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=621)